ZeroHour

CVE-2016-8649

CVSS 3.0
9.1 critical
EPSS
3%p86
Published
()
Modified
Description

lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.

Vendors
linuxcontainers
Products
lxc
Weakness
CWE-264
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.