medium5.5
CVE-2016-1581
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data…
Impact
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Versions 15.10, 16.04 |
| Canonical | Lxd | through 2.0.1 |