exploitDog

GHSA-hxv7-f4qv-7rm4

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2015-1342
https://github.com/lxc/lxcfs/commit/a8b6c3e0537e90fba3c55910fd1b7229d54a60a7
https://bugs.launchpad.net/ubuntu/+source/lxcfs/+bug/1508481
http://www.ubuntu.com/usn/USN-2813-1

EPSS

Процентиль: 39%

0.00469

Низкий

CVE ID

Связанные уязвимости

CVE-2015-1342

ubuntu

больше 10 лет назад

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

CVE-2015-1342

nvd

больше 10 лет назад

LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

CVE-2015-1342

debian

больше 10 лет назад

LXCFS before 0.12 does not properly enforce directory escapes, which m ...

EPSS

Процентиль: 39%

0.00469

Низкий

CVE ID