CVE-2016-8649
Fixed in a distro release EPSS 3%
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
Products: linuxcontainers lxc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | lxc | 1:2.0.6-1 |
| Debian 13 | lxc | 1:2.0.6-1 |
| Debian 14 | lxc | 1:2.0.6-1 |
| Ubuntu 14.04 LTS | lxc | 1.0.8-0ubuntu0.4 |
| Ubuntu 16.04 LTS | lxc | 2.0.5-0ubuntu1~ubuntu16.04.3 |
| openSUSE Tumbleweed | lxc | 2.0.4-2.1 |