LX
Product
Lxc
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 1Low 3
Watch
Add Lxc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8649 | 9.1 | May 1 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the… Affected: before 1.0.9; 2.0.0 before 2.0.6 |
| CVE-2019-5736 | 8.6 | Feb 11 | runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by… Affected: before 3.2.0 |
| CVE-2016-10124 | 8.6 | Jan 9 | An issue was discovered in Linux Containers (LXC) before 2016-02-22 Affected: through 2.0.0 |
| CVE-2017-18641 | 8.1 | Feb 10 | In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers Affected: 2.0.0 |
| CVE-2026-39402 | 6.5 | May 5 | lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion Affected: before 7.0.0 |
| CVE-2022-47952 | 3.3 | Jan 1 | lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to… Affected: through 5.0.1 |
| CVE-2018-6556 | 3.3 | Aug 10 | The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files Affected: 2.0.0 through 2.0.9; 3.0.0 before 3.0.2 |
| CVE-2017-5985 | 3.3 | Mar 14 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by… Affected: through 1.0.9; 2.0.0 through 2.0.6 |
| CVE-2015-1335 | – | Oct 1 | lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind… Affected: through 1.0.7; 1.1.0; 1.1.1; 1.1.2; 1.1.3 |
| CVE-2015-1334 | – | Aug 12 | attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc… Affected: through 1.1.2 |
| CVE-2015-1331 | – | Aug 12 | lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/* Affected: through 1.1.2 |
| CVE-2013-6441 | – | Feb 14 | The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by… Affected: through 0.9.0; 0.1.0; 0.2.0; 0.2.1; 0.3.0; 0.4.0; +18 more |
Showing 12