CVE-2016-8649 PUBLISHED

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.

EPSS 2.15% · 84.1th percentile

Risk Scores

EPSS Score
2.15%
84.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlxc0, 1.0.0~alpha1-0ubuntu11, 1.0.0~alpha2-0ubuntu1
Ubuntu:16.04:LTSlxc0, 1.1.4-0ubuntu1, 1.1.4-0ubuntu1.1

Timeline

References

Open in Interactive Console →