USN-3224-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 09 Mar 2017, 16:28
Last modified:22 Apr 2026, 09:32

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Mar 2017, 16:28
Published
Vulnerability first disclosed
22 Apr 2026, 09:32
Last Modified
Vulnerability information updated

Description

lxc vulnerability Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create virtual network interfaces in network namespaces that they do not own.

Affected Systems

  • ubuntu•lxc

    < 1.0.9-0ubuntu3 | < 2.0.7-0ubuntu1~16.04.2

References (2)