CVE-2016-10124 in LCXinfo

Summary

An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

01/09/2017

Disclosure

01/09/2017

Entries

1: VDB-95102

CPE

ready

CVSS

7.9

EPSS

0.00277

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!