CVE-2016-1582

EPSS 0.04%
Veröffentlicht 09.06.2016 16:59:03
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security@ubuntu.com
Teams Watchlist Login
Unerledigt Login

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version15.10

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Canonical ≫ Lxd Version2.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.04%	0.089

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.ubuntu.com/usn/USN-2988-1

https://linuxcontainers.org/lxd/news/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-1582

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1582

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1582

EUVD