CVE-2015-1331
Fixed in a distro release EPSS <1%
lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
Products: linuxcontainers lxc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lxc | 1:1.0.7-4 |
| Debian 13 | lxc | 1:1.0.7-4 |
| Debian 14 | lxc | 1:1.0.7-4 |
| Debian 8 | lxc | 1:1.0.6-6+deb8u1 |
| Ubuntu 14.04 LTS | lxc | 1.0.7-0ubuntu0.2 |
| openSUSE Tumbleweed | lxc | 2.0.4-2.1 |