CVE-2015-1334
Fixed in a distro release EPSS <1%
attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
Products: linuxcontainers lxc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lxc | 1:1.0.7-4 |
| Debian 13 | lxc | 1:1.0.7-4 |
| Debian 14 | lxc | 1:1.0.7-4 |
| Debian 8 | lxc | 1:1.0.6-6+deb8u1 |
| Ubuntu 14.04 LTS | lxc | 1.0.7-0ubuntu0.2 |
| openSUSE Tumbleweed | lxc | 2.0.4-2.1 |