attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "liblxc1", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "liblxc1-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-dbg", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-dev", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-dev-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-templates", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-templates-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-tests", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "lxc-tests-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "python3-lxc", "binary_version": "1.0.7-0ubuntu0.2" }, { "binary_name": "python3-lxc-dbgsym", "binary_version": "1.0.7-0ubuntu0.2" } ] }