CVE-2013-6441: linuxcontainers lxc
Vulnerability summary
CVE-2013-6441 is a high (CVSS 7.2) vulnerability in linuxcontainers lxc. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 42.7% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 14-02-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.50% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundLxc
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Mageia2 products
- lxc< 0.8.0-1.2.mga3
- lxc< 0.9.0-5.1.mga4
Debian1 product
- lxc< 1.0.0-1
Linuxcontainers1 product
- lxc≤ 0.9.0 | 0.1.0 | 0.2.0 | 0.2.1 | 0.3.0 | 0.4.0 | 0.5.0 | 0.5.1 | 0.5.2 | 0.6.0 | 0.6.1 | 0.6.2 | 0.6.3 | 0.6.4 | 0.6.5 | 0.7.0 | 0.7.1 | 0.7.2 | 0.7.3 | 0.7.4 | 0.7.4.1 | 0.7.4.2 | 0.7.5 | 0.8.0
Ubuntu1 product
- lxc< 1.0.0~beta2-0ubuntu1
4 vendors · 5 products
References
11 links- bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045X Refsource CONFIRM
- github.com/dotcloud/lxc/pull/1X Refsource CONFIRM
