lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "liblxc1",
"binary_version": "1.0.7-0ubuntu0.2"
},
{
"binary_name": "lxc",
"binary_version": "1.0.7-0ubuntu0.2"
},
{
"binary_name": "lxc-dev",
"binary_version": "1.0.7-0ubuntu0.2"
},
{
"binary_name": "lxc-templates",
"binary_version": "1.0.7-0ubuntu0.2"
},
{
"binary_name": "lxc-tests",
"binary_version": "1.0.7-0ubuntu0.2"
},
{
"binary_name": "python3-lxc",
"binary_version": "1.0.7-0ubuntu0.2"
}
]
}