PT-2017-16808 · Linux+3 · Lxc+3

Jann Horn · Published 2015-03-12 · Updated 2024-06-15 · CVE-2017-5985

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linux Containers (LXC) (affected versions not specified)

Description The issue allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces. This is possible due to a lack of netns ownership check in the lxc-user-nic component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ALT-PU-2015-1277

ALT-PU-2017-1278

CVE-2017-5985

MGASA-2017-0167

OPENSUSE-SU-2019_1481-1

OPENSUSE-SU-2024:11030-1

USN-3224-1

Affected Products

Alt Linux

Lxc

Suse

Ubuntu

References · 35

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_runc_escape.rb · Exploit
• 🔥 https://github.com/Frichetten/CVE-2019-5736-PoC · Exploit
• 🔥 https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c · Exploit
• 🔥 https://github.com/q3k/cve-2019-5736-poc · Exploit
• 🔥 https://github.com/twistlock/RunC-CVE-2019-5736 · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-5736 · Exploit
• 🔥 https://github.com/agppp/cve-2019-5736-poc · Exploit
• https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9 · Patch
• https://ubuntu.com/security/notices/USN-3224-1 · Vendor Advisory
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html · Vendor Advisory
• https://ubuntu.com/usn/usn-3224-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-5985 · Security Note
• https://ubuntu.com/security/CVE-2017-5985 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0167 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11030-1 · Vendor Advisory