Lxc
CVE-2015-1331
MEDIUM
Severity by source
AV:L/AC:L/Au:N/C:N/I:C/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
AnalysisAI
lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. Rated medium severity (CVSS 4.9), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-59. lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. Affected products include: Linuxcontainers Lxc.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/
Path traversal in Incus system container manager allows authenticated remote attackers to write arbitrary files as root
Incus system container and virtual machine manager versions prior to 6.23.0 allow authenticated users with instance acce
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inh
Authentication bypass in Incus webui (versions prior to 6.23.0) permits local or remote attackers to gain unauthorized a
An issue was discovered in Linux Containers (LXC) before 2016-02-22. Rated high severity (CVSS 8.6), this vulnerability
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinemen
Denial of service in Incus prior to version 6.23.0 allows authenticated users with storage bucket access to crash the In
Incus versions prior to 6.23.0 fail to validate image fingerprints when downloading from simplestreams servers, enabling
Incus versions prior to 6.23.0 allow local authenticated attackers to manipulate temporary screenshot files via predicta
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape
Authorization bypass in LXC's setuid helper lxc-user-nic allows unprivileged users to delete OpenVSwitch-attached networ
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today