PT-2015-5219 · Linux Containers+3 · Lxc+3

Roman Fiedler · Publicado 2015-09-29 · Atualizado 2024-06-15 · CVE-2015-1335

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lxc versions prior to 1.0.8 lxc versions 1.1.x prior to 1.1.4

Description The issue allows local container administrators to escape AppArmor confinement through a symlink attack. This can be achieved by targeting either a mount target or a bind mount source.

Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later. For versions 1.1.x prior to 1.1.4, update to version 1.1.4 or later.

Exploit

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

ALT-PU-2015-1962

CVE-2015-1335

DLA-442-1

DSA-3400-1

MGASA-2016-0036

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:10416-1

SUSE-SU-2015:1829-1

SUSE-SU-2015_1829-1

USN-2753-1

USN-2753-2

USN-2753-3

Produtos afetados

Alt Linux

Suse

Ubuntu

Lxc

Referências · 48

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html · Aviso do Fabricante
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=16855 · Nota
• https://suse.com/security/cve/CVE-2016-8649 · Nota
• https://suse.com/security/cve/CVE-2015-1331 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10416-1 · Aviso do Fabricante
• http://securityfocus.com/bid/76894 · Nota