Linuxcontainers / Lxc
12 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-39402 | lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion | MEDIUM | 4.3 | May 5, 2026 |
| CVE-2022-47952 | lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree,… | LOW | 3.3 | Jan 1, 2023 |
| CVE-2017-18641 | In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers. | HIGH | 8.1 | Feb 10, 2020 |
| CVE-2019-5736 | runc: Execution of malicious containers allows for container escape and access to host filesystem | HIGH | 8.6 | Feb 11, 2019 |
| CVE-2018-6556 | The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files | LOW | 3.3 | Aug 10, 2018 |
| CVE-2016-8649 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /… | CRITICAL | 9.1 | May 1, 2017 |
| CVE-2017-5985 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those i… | LOW | 3.3 | Mar 14, 2017 |
| CVE-2016-10124 | An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent sess… | HIGH | 8.6 | Jan 9, 2017 |
| CVE-2015-1335 | lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount t… | HIGH | 7.2 | Oct 1, 2015 |
| CVE-2015-1334 | attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by moun… | MEDIUM | 4.6 | Aug 12, 2015 |
| CVE-2015-1331 | lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*. | MEDIUM | 4.9 | Aug 12, 2015 |
| CVE-2013-6441 | lxc: sshd template allow privilege escalation on host | HIGH | 7.2 | Feb 14, 2014 |
Showing 1 to 12 of 12 CVEs