SUSE-RU-2015:0992-1

    Dashboard / Vulnerabilities / SUSE-RU-2015:0992-1

    SUSE-RU-2015:0992-1

    Published: 1 Apr 2014Last Modified: 2 May 2025
    Upstream:
    CVE-2013-6441
    Aliases:
    CVE-2013-6441

    Summary: Security update for lxc

    Details: The container framework LXC has been updated to fix various bugs and a security issue: * CVE-2013-6441: The sshd template allowed privilege escalation on the host. * SLES container time not aligned with host time (bnc#839653) * SLES container boot takes ages (bnc#839663) * lxc mounts /dev/pts with wrong options (bnc#869663) Security Issues: * CVE-2013-6441 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6441>

    References: https://www.suse.com/support/update/announcement//suse-ru-20150992-1/, https://bugzilla.suse.com/835585, https://bugzilla.suse.com/839653, https://bugzilla.suse.com/839663, https://bugzilla.suse.com/855809, https://bugzilla.suse.com/869663, https://bugzilla.suse.com/924891, https://bugzilla.suse.com/924892, https://www.suse.com/security/cve/CVE-2013-6441

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-RU-2015:0992-1 | CVE-DB