CVE-2016-8649 in lxc

الملخص

بحسب MITRE

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 12/10/2016
• إفشاء: 01/05/2017
• الاعتدال: تمت الموافقة
• إدخال: VDB-100774
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 9.1 (NVD)
• EPSS: 0.02154
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8649
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8649
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8649/