https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:53:34 +0000 https://vulnerability.circl.lu/vuln/cve-2015-1331 <p>lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.</p> <p>lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.</p> https://vulnerability.circl.lu/vuln/cve-2015-1331 https://vulnerability.circl.lu/vuln/usn-2675-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxc</p> <p>Roman Fiedler discovered that LXC had a directory traversal flaw when creating lock files. A local attacker could exploit this flaw to create an arbitrary file as the root user. (CVE-2015-1331)</p> <p>Roman Fiedler discovered that LXC incorrectly trusted the container&#39;s proc filesystem to set up AppArmor profile changes and SELinux domain transitions. A local attacker could exploit this flaw to run programs inside the container that are not confined by AppArmor or SELinux. (CVE-2015-1334)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: lxc</p> <p>Roman Fiedler discovered that LXC had a directory traversal flaw when creating lock files. A local attacker could exploit this flaw to create an arbitrary file as the root user. (CVE-2015-1331)</p> <p>Roman Fiedler discovered that LXC incorrectly trusted the container&#39;s proc filesystem to set up AppArmor profile changes and SELinux domain transitions. A local attacker could exploit this flaw to run programs inside the container that are not confined by AppArmor or SELinux. (CVE-2015-1334)</p> https://vulnerability.circl.lu/vuln/usn-2675-1