Skip to content
OpenAdvisories
Unscored DSA-3317-1 2 CVEs

lxc - security update

Published Jul 25, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 lxc 1:1.0.6-6+deb8u1

Vulnerabilities 2

  • Unscored —

    lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.

  • Unscored —

    attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape…