util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6764.json"