USN-3136-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 23 Nov 2016, 17:33
Last modified:22 Apr 2026, 09:29

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Nov 2016, 17:33
Published
Vulnerability first disclosed
22 Apr 2026, 09:29
Last Modified
Vulnerability information updated

Description

lxc vulnerability Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files outside of the container.

Affected Systems

  • ubuntu•lxc

    < 1.0.8-0ubuntu0.4 | < 2.0.5-0ubuntu1~ubuntu16.04.3

References (2)