[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-8649":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":32,"related":33,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":48,"kevs":81,"epss":82,"epss_history":85,"metrics":335,"affected":345},"CVE-2016-8649","lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-264","Permissions, Privileges, and Access Controls","Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","category","Obsolete",[],[],[],[],[22,24,26,28,30],{"_key":23},"OPENSUSE-SU-2024:10416-1",{"_key":25},"MGASA-2017-0167",{"_key":27},"UBUNTU-CVE-2016-8649",{"_key":29},"USN-3136-1",{"_key":31},"DEBIAN-CVE-2016-8649",[],[34,35],{"_key":23},{"_key":25},"2017-05-01T06:08:00.000Z","2024-08-06T02:27:41.373Z","Modified",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":41,"epss_score":42,"severity":43,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":38},false,"low",0.02154,"critical",9.1,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",[49,57,62,67,71,76],{"url":50,"sources":51,"tags":53},"https://bugzilla.redhat.com/show_bug.cgi?id=1398242",[52,46],"cve.org",[54,55,56],"X Refsource CONFIRM","Issue Tracking","Patch",{"url":58,"sources":59,"tags":60},"https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345",[52,46],[54,61],"Third Party Advisory",{"url":63,"sources":64,"tags":65},"https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c",[52,46],[54,56,66],"Vendor Advisory",{"url":68,"sources":69,"tags":70},"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465",[52,46],[54,61],{"url":72,"sources":73,"tags":74},"https://security-tracker.debian.org/tracker/CVE-2016-8649",[52,46],[54,61,75],"VDB Entry",{"url":77,"sources":78,"tags":79},"http://www.securityfocus.com/bid/94498",[52,46],[75,80,61],"X Refsource BID",[],{"date":83,"score":42,"percentile":84},"2026-06-04",0.84573,[86,89,92,95,98,101,104,106,109,112,115,117,119,122,125,128,130,133,136,138,140,142,145,148,150,153,156,158,161,164,167,170,172,175,178,180,183,186,189,192,195,198,200,203,206,209,211,214,217,220,223,226,229,231,234,236,239,242,245,248,251,254,256,259,261,263,266,269,272,275,277,279,282,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332],{"date":87,"score":42,"percentile":88},"2025-11-04",0.83687,{"date":90,"score":42,"percentile":91},"2025-11-05",0.83692,{"date":93,"score":42,"percentile":94},"2025-11-06",0.83696,{"date":96,"score":42,"percentile":97},"2025-11-07",0.83702,{"date":99,"score":42,"percentile":100},"2025-11-08",0.83706,{"date":102,"score":42,"percentile":103},"2025-11-09",0.83701,{"date":105,"score":42,"percentile":94},"2025-11-10",{"date":107,"score":42,"percentile":108},"2025-11-11",0.837,{"date":110,"score":42,"percentile":111},"2025-11-12",0.83712,{"date":113,"score":42,"percentile":114},"2025-11-13",0.83719,{"date":116,"score":42,"percentile":114},"2025-11-14",{"date":118,"score":42,"percentile":111},"2025-11-15",{"date":120,"score":42,"percentile":121},"2025-11-16",0.83714,{"date":123,"score":42,"percentile":124},"2025-11-17",0.83713,{"date":126,"score":42,"percentile":127},"2025-11-18",0.82884,{"date":129,"score":42,"percentile":127},"2025-11-19",{"date":131,"score":42,"percentile":132},"2025-11-20",0.82888,{"date":134,"score":42,"percentile":135},"2025-11-21",0.83722,{"date":137,"score":42,"percentile":114},"2025-11-22",{"date":139,"score":42,"percentile":111},"2025-11-23",{"date":141,"score":42,"percentile":124},"2025-11-24",{"date":143,"score":42,"percentile":144},"2025-11-25",0.83708,{"date":146,"score":42,"percentile":147},"2025-11-26",0.83709,{"date":149,"score":42,"percentile":144},"2025-11-27",{"date":151,"score":42,"percentile":152},"2025-11-28",0.83695,{"date":154,"score":42,"percentile":155},"2025-11-29",0.8371,{"date":157,"score":42,"percentile":124},"2025-11-30",{"date":159,"score":42,"percentile":160},"2025-12-01",0.83785,{"date":162,"score":42,"percentile":163},"2025-12-02",0.83787,{"date":165,"score":42,"percentile":166},"2025-12-03",0.83789,{"date":168,"score":42,"percentile":169},"2025-12-04",0.83717,{"date":171,"score":42,"percentile":135},"2025-12-05",{"date":173,"score":42,"percentile":174},"2025-12-06",0.8372,{"date":176,"score":42,"percentile":177},"2025-12-07",0.83711,{"date":179,"score":42,"percentile":124},"2025-12-08",{"date":181,"score":42,"percentile":182},"2025-12-09",0.83725,{"date":184,"score":42,"percentile":185},"2025-12-10",0.83745,{"date":187,"score":42,"percentile":188},"2025-12-11",0.83758,{"date":190,"score":42,"percentile":191},"2025-12-12",0.83766,{"date":193,"score":42,"percentile":194},"2025-12-13",0.83761,{"date":196,"score":42,"percentile":197},"2025-12-14",0.8376,{"date":199,"score":42,"percentile":197},"2025-12-15",{"date":201,"score":42,"percentile":202},"2025-12-16",0.83768,{"date":204,"score":42,"percentile":205},"2025-12-17",0.83774,{"date":207,"score":42,"percentile":208},"2025-12-18",0.83781,{"date":210,"score":42,"percentile":160},"2025-12-19",{"date":212,"score":42,"percentile":213},"2025-12-20",0.8378,{"date":215,"score":42,"percentile":216},"2025-12-21",0.83777,{"date":218,"score":42,"percentile":219},"2025-12-22",0.83773,{"date":221,"score":42,"percentile":222},"2025-12-23",0.83776,{"date":224,"score":42,"percentile":225},"2025-12-24",0.83786,{"date":227,"score":42,"percentile":228},"2025-12-25",0.83801,{"date":230,"score":42,"percentile":228},"2025-12-26",{"date":232,"score":42,"percentile":233},"2025-12-27",0.83843,{"date":235,"score":42,"percentile":225},"2025-12-28",{"date":237,"score":42,"percentile":238},"2025-12-29",0.83783,{"date":240,"score":42,"percentile":241},"2025-12-30",0.83788,{"date":243,"score":42,"percentile":244},"2025-12-31",0.83802,{"date":246,"score":42,"percentile":247},"2026-01-01",0.83871,{"date":249,"score":42,"percentile":250},"2026-01-02",0.8387,{"date":252,"score":42,"percentile":253},"2026-01-03",0.83863,{"date":255,"score":42,"percentile":241},"2026-01-04",{"date":257,"score":42,"percentile":258},"2026-01-05",0.83782,{"date":260,"score":42,"percentile":241},"2026-01-06",{"date":262,"score":42,"percentile":241},"2026-01-07",{"date":264,"score":42,"percentile":265},"2026-01-08",0.83796,{"date":267,"score":42,"percentile":268},"2026-01-09",0.83797,{"date":270,"score":42,"percentile":271},"2026-01-10",0.83793,{"date":273,"score":42,"percentile":274},"2026-01-11",0.83791,{"date":276,"score":42,"percentile":225},"2026-01-12",{"date":278,"score":42,"percentile":238},"2026-01-13",{"date":280,"score":42,"percentile":281},"2026-01-14",0.83803,{"date":283,"score":42,"percentile":244},"2026-01-15",{"date":285,"score":42,"percentile":286},"2026-01-16",0.83811,{"date":288,"score":42,"percentile":289},"2026-01-17",0.83814,{"date":291,"score":42,"percentile":292},"2026-01-18",0.83808,{"date":294,"score":42,"percentile":295},"2026-01-19",0.83804,{"date":297,"score":42,"percentile":298},"2026-01-20",0.83805,{"date":300,"score":42,"percentile":301},"2026-01-21",0.8381,{"date":303,"score":42,"percentile":304},"2026-01-22",0.83815,{"date":306,"score":42,"percentile":307},"2026-01-23",0.8384,{"date":309,"score":42,"percentile":310},"2026-01-24",0.83849,{"date":312,"score":42,"percentile":313},"2026-01-25",0.83845,{"date":315,"score":42,"percentile":316},"2026-01-26",0.83844,{"date":318,"score":42,"percentile":319},"2026-01-27",0.83846,{"date":321,"score":42,"percentile":322},"2026-01-28",0.8385,{"date":324,"score":42,"percentile":325},"2026-01-29",0.83851,{"date":327,"score":42,"percentile":328},"2026-01-30",0.83854,{"date":330,"score":42,"percentile":331},"2026-01-31",0.8386,{"date":333,"score":42,"percentile":334},"2026-02-01",0.83932,[336],{"source":46,"cvss_v2_0":337,"cvss_v3_0":342,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":338,"baseSeverity":9,"vectorString":339,"impactScore":340,"exploitabilityScore":341},9,"AV:N/AC:L/Au:S/C:C/I:C/A:C",10,8,{"baseScore":44,"baseSeverity":343,"vectorString":47,"impactScore":340,"exploitabilityScore":344},"CRITICAL",5.9,[346],{"ecosystem":9,"name":347,"vendor":348,"product":347,"cpe_part":349,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":350},"lxc","linuxcontainers","a",[351,357],{"version":352,"is_range":353,"range_type":354,"version_start":9,"version_start_type":9,"version_end":355,"version_end_type":356,"fixed_in":9},"lt1.0.9",true,"cpe","1.0.9","excluding",{"version":358,"is_range":353,"range_type":354,"version_start":359,"version_start_type":360,"version_end":361,"version_end_type":356,"fixed_in":9},"gte2.0.0_lt2.0.6","2.0.0","including","2.0.6"]