PT-2017-16808 · Linux+3 · Lxc+3

Jann Horn · Publicado 2015-03-12 · Atualizado 2024-06-15 · CVE-2017-5985

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linux Containers (LXC) (affected versions not specified)

Description The issue allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces. This is possible due to a lack of netns ownership check in the lxc-user-nic component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

ALT-PU-2015-1277

ALT-PU-2017-1278

CVE-2017-5985

MGASA-2017-0167

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:11030-1

USN-3224-1

Produtos afetados

Alt Linux

Lxc

Suse

Ubuntu

Referências · 35

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9 · Correção
• https://lists.linuxcontainers.org/pipermail/lxc-users/2017-March/012925.html · Nota
• http://securityfocus.com/bid/96777 · Nota
• https://ubuntu.com/security/notices/USN-3224-1 · Aviso do Fabricante
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=19835 · Nota
• https://suse.com/security/cve/CVE-2018-6556 · Nota
• https://ubuntu.com/usn/usn-3224-1 · Aviso do Fabricante