PT-2015-5218 · Linux Containers+3 · Lxc+3

Roman Fiedler · Publicado 2015-07-22 · Atualizado 2024-06-15 · CVE-2015-1334

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LXC versions 1.1.2 and earlier

Description The issue allows local container users to escape AppArmor or SELinux confinement. This is achieved by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.

Recommendations For LXC versions 1.1.2 and earlier, consider disabling the use of the proc filesystem in containers until a patch is available. Restrict access to the attach.c module to minimize the risk of exploitation. Avoid using crafted AppArmor profiles or SELinux labels in the affected containers.

Exploit

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1784

CVE-2015-1334

DSA-3317-1

MGASA-2015-0304

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:10416-1

USN-2675-1

Produtos afetados

Alt Linux

Lxc

Suse

Ubuntu

Referências · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• https://github.com/lxc/lxc/commit/5c3fcae78b63ac9dd56e36075903921bd9461f9e · Nota
• https://advisories.mageia.org/MGASA-2015-0304.html · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1334 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-1334 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-8649 · Nota
• https://suse.com/security/cve/CVE-2015-1331 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10416-1 · Aviso do Fabricante
• https://service.ait.ac.at/security/2015/LxcSecurityAnalysis.html · Nota