LOW🇵🇱 Wersja polska

CVE-2018-6556

CVSS 3.3v3.0pub. 2018-08-10upd. 2024-11-21

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

  • Canonical Ubuntu

    OS
    Canonical
    18.04

  • Linuxcontainers Lxc

    APP
    Linuxcontainers
    2.0.0 – 2.0.93.0.0 – 3.0.2 (bez)

  • Opensuse Leap

    OS
    Opensuse
    15.0

  • SUSE Caas Platform

    APP
    Suse
    1.02.0

  • SUSE Openstack Cloud

    APP
    Suse
    6

  • SUSE Linux Enterprise Server

    OS
    Suse
    11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2022-0543CRITICAL10.0⚠ KEVten sam produkt

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debia...

CVE-2020-16846CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the...

CVE-2020-12641CRITICAL9.8⚠ KEVten sam produkt

rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacha...

CVE-2020-11651CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process Clea...