CVE-2015-8222

Published: Nov 17, 2015Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.

Affected (1)

Products: Canonical: Ubuntu Linux

Canonical

1 product

Ubuntu Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 15.10

Related CWEs

CWE-264

References (6)

http://www.ubuntu.com/usn/USN-2809-1

Source: cve@mitre.org

PatchVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1515689

Source: cve@mitre.org

https://github.com/lxc/lxd/issues/1307

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2809-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1515689

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/lxc/lxd/issues/1307

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.