chmod race in doUidshiftIntoContainer
CVE-2015-1340

7HIGH

Key Information:

Vendor

Ubuntu

Status
Lxd
Vendor
CVE Published:
22 April 2019

What is CVE-2015-1340?

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.

Affected Version(s)

LXD < 0.19-0ubuntu5

References

https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f208...
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.