CVE-2016-1582

Related Files

Ubuntu Security Notice USN-2988-1

Posted Jun 1, 2016

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2988-1 - Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read the data of any LXD container. Robie Basak discovered that LXD incorrectly set permissions when switching an unprivileged container into privileged mode. A local attacker could use this issue to access any world readable path in the container directory, including setuid binaries. Various other issues were also addressed.

tags | advisory, local

systems | linux, ubuntu

advisories | CVE-2016-1581, CVE-2016-1582

SHA-256 | eaa7edec08f0e3f46bdd99e86421a02ee9649cd7ed30ad06309fea46089f3b8f

Download | Favorite | View