USN-2988-1

Dashboard / Vulnerabilities / USN-2988-1

USN-2988-1

Summary: lxd vulnerabilities

Details: Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read the data of any LXD container. (CVE-2016-1581) Robie Basak discovered that LXD incorrectly set permissions when switching an unprivileged container into privileged mode. A local attacker could use this issue to access any world readable path in the container directory, including setuid binaries. (CVE-2016-1582)

References: https://ubuntu.com/security/notices/USN-2988-1, https://ubuntu.com/security/CVE-2016-1581, https://ubuntu.com/security/CVE-2016-1582