Unscored severity · published Aug 12, 2015
CVE-2015-1334
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc…
–
CVSS
0.4%
EPSS
No
On KEV
Description
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LX
Lxc · Linuxcontainers
through 1.1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-1334
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-1334
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2015-07/msg00066.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2015-07/msg00067.html
www.debian.org
http://www.debian.org/security/2015/dsa-3317
www.securityfocus.com
http://www.securityfocus.com/bid/75998
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2675-1
More from Lxc
9.1
CVE-2016-8649
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the…
8.6
CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by…
8.6
CVE-2016-10124
An issue was discovered in Linux Containers (LXC) before 2016-02-22
8.1
CVE-2017-18641
In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers
6.5
CVE-2026-39402
lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion