Skip to content
OpenAdvisories
Unscored USN-3136-1 1 CVE

lxc vulnerability

Published Nov 23, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Roman Fiedler discovered a directory traversal flaw in lxc-attach. An
attacker with access to an LXC container could exploit this flaw to access
files outside of the container.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS lxc 1.0.8-0ubuntu0.4
Ubuntu · 16.04 LTS 16.04:LTS lxc 2.0.5-0ubuntu1~ubuntu16.04.3

Vulnerabilities 1

  • Unscored —
    CVE-2016-8649

    lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an in…

    lxc lxc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-8649