CVE-2016-1582

EPSS 0.04%
Published 09.06.2016 16:59:03
Last modified 12.04.2025 10:46:40
Source security@ubuntu.com
Teams watchlist Login
Open Login

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version15.10

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Canonical ≫ Lxd Version2.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.089

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ubuntu.com/usn/USN-2988-1

https://linuxcontainers.org/lxd/news/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1582

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1582

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1582

EUVD