Unscored CVE-2015-1342 EUVD-2015-1481GHSA-hxv7-f4qv-7rm4

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) upda…

Published Dec 7, 2015 · Updated Aug 6, 2024 · Assigned by canonical

Description

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

References

https://bugs.launchpad.net/ubuntu/+source/lxcfs/+bug/1508481
https://github.com/lxc/lxcfs/commit/a8b6c3e0537e90fba3c55910fd1b7229d54a60a7
USN-2813-1 vendor-advisory