Vulnetix
Try Vulnetix Request Demo
CVE-2016-3096 PUBLISHED

The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.

EPSS 0.04% · 10.8th percentile

Risk Scores

EPSS Score
0.04%
10.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSansible0, 1.9.2+dfsg-2, 1.9.4-1

Timeline

References

Open in Interactive Console →