CVE-2015-1335
Fixed in a distro release EPSS <1%
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
Products: linuxcontainers lxc, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lxc | 1:1.0.8-1 |
| Debian 13 | lxc | 1:1.0.8-1 |
| Debian 14 | lxc | 1:1.0.8-1 |
| Debian 6.0 | lxc | 0.7.2-1+deb6u1 |
| Debian 8 | lxc | 1:1.0.6-6+deb8u2 |
| SUSE Linux Enterprise Desktop 11 SP3 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Server 11 SP3 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Server 11 SP4 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | lxc | 0.8.0-0.25.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | lxc | 0.8.0-0.25.1 |
| Ubuntu 14.04 LTS | lxc | 1.0.7-0ubuntu0.5 |
| openSUSE Tumbleweed | lxc | 2.0.4-2.1 |