CVE-2016-8649 lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's fi...
CriticalCVSS 9.1
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lxc(Debian:12) | < 1:2.0.6-1 | 1:2.0.6-1 |
| debian/lxc(Debian:13) | < 1:2.0.6-1 | 1:2.0.6-1 |
| debian/lxc(Debian:14) | < 1:2.0.6-1 | 1:2.0.6-1 |
| linuxcontainers lxc | < 1.0.9 | 1.0.9 |
| linuxcontainers lxc | >= 2.0.0, < 2.0.6 | 2.0.6 |
References
- Debian Security Tracker CVE-2016-8649 third-party-advisory vdb-entry vendor-advisory
- 94498 third-party-advisory vdb-entry
- bugs.debian.org third-party-advisory
- bugs.launchpad.net third-party-advisory
- bugzilla.redhat.com issue-tracking patch
- github.com patch vendor-advisory
- bugs.debian.org issue-tracking