High severity · published Jan 9, 2017
CVE-2016-10124
An issue was discovered in Linux Containers (LXC) before 2016-02-22
8.6
CVSS
1.5%
EPSS
No
On KEV
Description
An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LX
Lxc · Linuxcontainers
through 2.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10124
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10124
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/12/15/5
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/09/03/5
www.securityfocus.com
http://www.securityfocus.com/bid/95404
Issue Tracking
https://github.com/lxc/lxc/commit/e986ea3dfa4a2957f71ae9bfaed406dd6e1ffff6
security.gentoo.org
https://security.gentoo.org/glsa/201711-09
More from Lxc
9.1
CVE-2016-8649
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the…
8.6
CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by…
8.1
CVE-2017-18641
In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers
6.5
CVE-2026-39402
lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion
3.3
CVE-2022-47952
lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to…