PT-2015-5218 · Linux Containers+3 · Lxc+3

Roman Fiedler · Published 2015-07-22 · Updated 2024-06-15 · CVE-2015-1334

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LXC versions 1.1.2 and earlier

Description The issue allows local container users to escape AppArmor or SELinux confinement. This is achieved by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.

Recommendations For LXC versions 1.1.2 and earlier, consider disabling the use of the proc filesystem in containers until a patch is available. Restrict access to the attach.c module to minimize the risk of exploitation. Avoid using crafted AppArmor profiles or SELinux labels in the affected containers.

Exploit

Fix

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1784

CVE-2015-1334

DSA-3317-1

MGASA-2015-0304

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:10416-1

USN-2675-1

Affected Products

Alt Linux

Lxc

Suse

Ubuntu

References · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• https://advisories.mageia.org/MGASA-2015-0304.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1334 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-1334 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10416-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3317-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1334 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-1334 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1334 · Vendor Advisory