CVE-2017-5985 lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns own...
LowCVSS 3.3
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lxc(Debian:12) | < 1:2.0.7-2 | 1:2.0.7-2 |
| debian/lxc(Debian:13) | < 1:2.0.7-2 | 1:2.0.7-2 |
| debian/lxc(Debian:14) | < 1:2.0.7-2 | 1:2.0.7-2 |
| linuxcontainers lxc | <= 1.0.9 | No fix listed |
| linuxcontainers lxc | >= 2.0.0, <= 2.0.6 | No fix listed |
References
- Debian Security Tracker CVE-2017-5985 vendor-advisory
- openSUSE-SU-2019:1481 vendor-advisory
- [oss-security] 20170309 LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership mailing-list third-party-advisory
- 96777 third-party-advisory vdb-entry
- USN-3224-1 third-party-advisory vendor-advisory
- bugs.launchpad.net third-party-advisory
- github.com issue-tracking patch
- [lxc-devel] 20170309 Security fix for CVE-2017-5985 (lxc-user-nic) mailing-list vendor-advisory
- bugs.debian.org issue-tracking