CVE-2017-5985
Fixed in a distro release EPSS <1%
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
Products: linuxcontainers lxc
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | lxc | 1:2.0.8-1 |
| Debian 12 | lxc | 1:2.0.7-2 |
| Debian 13 | lxc | 1:2.0.7-2 |
| Debian 14 | lxc | 1:2.0.7-2 |
| Ubuntu 14.04 LTS | lxc | 1.0.9-0ubuntu3 |
| Ubuntu 16.04 LTS | lxc | 2.0.7-0ubuntu1~16.04.2 |
| openSUSE Tumbleweed | lxc | 4.0.9-1.1 |