Skip to content
OpenAdvisories

Package · Alpine

lxc

3 known vulnerabilities.

3 results · Feed

  • Low 3.3
    CVE-2022-47952 Public exploit

    lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists,…

  • Unscored —
    CVE-2019-5736 Public exploit EPSS 98%

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …

  • Unscored —

    The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files

    lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used t…