← Back

Lxd

lxd

Vendor: Linuxcontainers • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-1340
1Linuxcontainers
1Lxd
Nov 21, 2024
Apr 22, 2019
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system...Show more
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.Show less