Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-5985

Опубликовано: 14 мар. 2017
Источник: debian

Описание

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
lxcfixed1:2.0.7-2package
lxcfixed1:1.0.6-6+deb8u6jessiepackage
lxcnot-affectedwheezypackage

Примечания

  • https://lists.linuxcontainers.org/pipermail/lxc-users/2017-March/012925.html

  • https://launchpad.net/bugs/1654676

  • master: https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9

  • stable-2.0: https://github.com/lxc/lxc/commit/d512bd5efb0e407eba350c4e649c464a65b712a3

  • stable-1.0: https://github.com/lxc/lxc/commit/c905f00ad78b78a5e9c0d67504b86e00dfe085ec

Связанные уязвимости

CVSS3: 3.3
ubuntu
почти 9 лет назад

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

CVSS3: 3.3
nvd
почти 9 лет назад

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

suse-cvrf
почти 9 лет назад

Security update for lxc

CVSS3: 3.3
github
больше 3 лет назад

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

suse-cvrf
больше 6 лет назад

Security update for lxc, lxcfs