CVE-2016-8649

Publication date 23 November 2016

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

9.1 · Critical

Score breakdown

Description

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.

Status

Package Ubuntu Release Status
lxc 17.04 zesty
Fixed 2.0.5-0ubuntu4
16.10 yakkety
Fixed 2.0.5-0ubuntu1.2
16.04 LTS xenial
Fixed 2.0.5-0ubuntu1~ubuntu16.04.3
14.04 LTS trusty
Fixed 1.0.8-0ubuntu0.4
12.04 LTS precise Ignored end of life

Severity score breakdown

Parameter Value
Base score 9.1 · Critical
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Scope Changed
Confidentiality High
Integrity impact High
Availability impact High
Vector CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

Other references