CVE-2016-8649
—CVSS 3.0
9.1 critical
EPSS
3%p86
Published
()
Modified
Description
lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
- Vendors
- linuxcontainers
- Products
- lxc
- Weakness
- CWE-264
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.