lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "liblxc1", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "liblxc1-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-dbg", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-dev", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-dev-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-templates", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-templates-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-tests", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "lxc-tests-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "python3-lxc", "binary_version": "1.0.8-0ubuntu0.4" }, { "binary_name": "python3-lxc-dbgsym", "binary_version": "1.0.8-0ubuntu0.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "liblxc1", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "liblxc1-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lua-lxc", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lua-lxc-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-common", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-common-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-dev", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-templates", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-templates-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-tests", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc-tests-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc1", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "lxc1-dbgsym", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" }, { "binary_name": "python3-lxc", "binary_version": "2.0.5-0ubuntu1~ubuntu16.04.3" } ] }