lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
{
"binaries": [
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "liblxc1"
},
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "lxc"
},
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "lxc-dev"
},
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "lxc-templates"
},
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "lxc-tests"
},
{
"binary_version": "1.0.7-0ubuntu0.2",
"binary_name": "python3-lxc"
}
],
"availability": "No subscription required"
}