CVE-2015-1334 PUBLISHED

attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.

EPSS 0.10% · 27.9th percentile

Risk Scores

EPSS Score
0.10%
27.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlxc0, 1.0.0~alpha1-0ubuntu11, 1.0.0~alpha2-0ubuntu1

Timeline

References

Open in Interactive Console →