PT-2015-5219 · Linux Containers+3 · Lxc+3

Roman Fiedler · Published 2015-09-29 · Updated 2024-06-15 · CVE-2015-1335

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lxc versions prior to 1.0.8 lxc versions 1.1.x prior to 1.1.4

Description The issue allows local container administrators to escape AppArmor confinement through a symlink attack. This can be achieved by targeting either a mount target or a bind mount source.

Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later. For versions 1.1.x prior to 1.1.4, update to version 1.1.4 or later.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2015-1962

CVE-2015-1335

DLA-442-1

DSA-3400-1

MGASA-2016-0036

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:10416-1

SUSE-SU-2015:1829-1

SUSE-SU-2015_1829-1

USN-2753-1

USN-2753-2

USN-2753-3

Affected Products

Alt Linux

Suse

Ubuntu

Lxc

References · 48

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html · Vendor Advisory
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10416-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-3087.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-2753-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1335 · Security Note
• https://ubuntu.com/security/notices/USN-2753-1 · Vendor Advisory