lxc

13 results · Feed

• Medium 6.8
  CVE-2026-100395

  LXC: lxc-copy host-context hostname update follows symlink

  LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In LXC 7.0.0 and earlier, lxc-copy and the public liblxc clone() API can follow attacker-controlled symbolic links while updating /etc/hostname…

  lxc lxc lxc lxc Debian Ubuntu
  Nov 5, 2026
• Medium 4.3
  CVE-2026-39402

  lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion

  lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network interfaces belonging to other users. When lxc-user-nic delet…

  lxc lxc lxc lxc Debian Ubuntu
  May 5, 2026
• Low 3.3
  CVE-2022-47952 Public exploit

  lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists,…

  lxc lxc lxc Debian Ubuntu Alpine
  Jan 1, 2023
• Unscored —
  CVE-2017-18641

  In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running…

  lxc lxc lxc-templates lxc-templates Debian Ubuntu
  Feb 10, 2020
• Unscored —
  CVE-2019-5736 Public exploit EPSS 98%

  runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc …

  docker.io runc runc runc Debian Ubuntu Alpine
  Feb 11, 2019
• Unscored —
  CVE-2018-6556

  The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files

  lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used t…

  lxc lxc lxc Debian Ubuntu Alpine
  Aug 10, 2018
• Unscored —
  CVE-2016-8649

  lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an in…

  lxc lxc Debian Ubuntu
  May 1, 2017
• Unscored —
  CVE-2017-5985

  lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on…

  lxc lxc Debian Ubuntu
  Mar 14, 2017
• Unscored —
  CVE-2016-10124

  An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpr…

  lxc lxc Debian Ubuntu
  Jan 9, 2017
• Unscored —
  CVE-2015-1335

  lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confineme…

  lxc lxc Debian Ubuntu
  Oct 1, 2015
• Unscored —
  CVE-2015-1334

  attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape…

  lxc lxc Debian Ubuntu
  Aug 12, 2015
• Unscored —
  CVE-2015-1331

  lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.

  lxc lxc Debian Ubuntu
  Aug 12, 2015
• Unscored —
  CVE-2013-6441

  The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin…

  lxc Debian
  Feb 14, 2014