CVE-2016-10124
Fixed in a distro release EPSS 2%
An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container.
Products: linuxcontainers lxc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lxc | 1:2.0.0-1 |
| Debian 13 | lxc | 1:2.0.0-1 |
| Debian 14 | lxc | 1:2.0.0-1 |
| Ubuntu 14.04 LTS | lxc | 1.0.10-0ubuntu1.1 |