Skip to content
OpenAdvisories
Unscored USN-3730-1 1 CVE

lxc vulnerability

Published Aug 6, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic
utility. A local attacker could possibly use this issue to open arbitrary
files.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS lxc 3.0.1-0ubuntu1~18.04.2

Vulnerabilities 1

  • Unscored —
    CVE-2018-6556

    The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files

    lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used t…

    lxc lxc lxc Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-6556