NetSight
IP …
high7.2

CVE-2015-1335

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount t…

Impact

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.

Affected products

VendorProductAffected versions
LinuxcontainersLxc
through 1.0.7
Versions 1.1.0, 1.1.1, 1.1.2, 1.1.3
CanonicalUbuntu Linux
Versions 14.04, 15.04

Weakness classification

CWE-59

References