CVE-2016-8649

CVE-2016-8649: vulnerability in LXC before 1.0.9 and 2.x before 2.0.6

Published · Updated

Follow this CVE+ Monitor before 1.0.9 and+ Monitor lxc

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.8%
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
Affected products
n/a · LXC before 1.0.9 and 2.x before 2.0.6