Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files
Vulnerability Description
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LXC 安全漏洞
Vulnerability Description
LXC（LinuX Containers）是Linux内核容器功能的一个用户空间接口，它通过强大的API和简单的工具，使Linux用户易于创建和管理系统或应用容器。 LXC 2.0版本至2.0.9版本和3.0.0版本至3.0.2之前的版本中存在安全漏洞，该漏洞源于程序在删除网络接口时，会自动打开用户所提供的路径。攻击者可利用该漏洞检测攻击者不能访问的路径是否存在。
CVSS Information
N/A
Vulnerability Type
N/A