Skip to content
OpenAdvisories

Product · Ubuntu

LXD

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    chmod race in doUidshiftIntoContainer

    LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's cho…