Skip to content
OpenAdvisories
Unscored USN-3224-1 1 CVE

lxc vulnerability

Published Mar 9, 2017 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Jann Horn discovered that LXC incorrectly verified permissions when creating
virtual network interfaces. A local attacker could possibly use this issue to
create virtual network interfaces in network namespaces that they do not own.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS lxc 1.0.9-0ubuntu3
Ubuntu · 16.04 LTS 16.04:LTS lxc 2.0.7-0ubuntu1~16.04.2

Vulnerabilities 1

  • Unscored —
    CVE-2017-5985

    lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on…

    lxc lxc Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-5985