CVE-2016-8649 - lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls

Back Back to CVE browser

CRITICAL

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls

Published May 1, 2017

9.1

CRITICAL

CVSS 3.0

EPSS 2.81%

Description

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.

Affected products

Vendor n/a Product LXC before 1.0.9 and 2.x before 2.0.6 Default
n/a
- Version
  LXC before 1.0.9 and 2.x before 2.0.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

LXC before 1.0.9 and 2.x before 2.0.6

n/a

Version	Status	Constraints
LXC before 1.0.9 and 2.x before 2.0.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

http://www.securityfocus.com/bid/94498
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465
x_refsource_CONFIRMThird Party Advisory
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345
x_refsource_CONFIRMThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1398242
x_refsource_CONFIRMIssue TrackingPatch
https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c
x_refsource_CONFIRMPatchVendor Advisory
https://security-tracker.debian.org/tracker/CVE-2016-8649
x_refsource_CONFIRMThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.securityfocus.com/bid/94498		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465		x_refsource_CONFIRMThird Party Advisory
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345		x_refsource_CONFIRMThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1398242		x_refsource_CONFIRMIssue TrackingPatch
https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c		x_refsource_CONFIRMPatchVendor Advisory
https://security-tracker.debian.org/tracker/CVE-2016-8649		x_refsource_CONFIRMThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published May 1, 2017

Updated Aug 6, 2024

Reserved Oct 12, 2016

Link CVE-2016-8649

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-8649

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-8649