Vulnerability-Lookup

ubuntu-cve-2015-1335

Vulnerability from osv_ubuntu

Published

2015-09-29 14:00

Modified

2026-04-22 07:37

Summary

Details

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2015-1335	REPORT
	https://ubuntu.com/security/notices/USN-2753-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2015-1335	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "liblxc1",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc-templates",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc-tests",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "python3-lxc",
            "binary_version": "1.0.7-0ubuntu0.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "lxc",
        "purl": "pkg:deb/ubuntu/lxc@1.0.7-0ubuntu0.5?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.7-0ubuntu0.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.0~alpha1-0ubuntu11",
        "1.0.0~alpha2-0ubuntu1",
        "1.0.0~alpha2-0ubuntu3",
        "1.0.0~alpha2-0ubuntu4",
        "1.0.0~alpha2-0ubuntu5",
        "1.0.0~alpha2-0ubuntu6",
        "1.0.0~alpha3-0ubuntu1",
        "1.0.0~alpha3-0ubuntu2",
        "1.0.0~alpha3-0ubuntu3",
        "1.0.0~alpha3-0ubuntu4",
        "1.0.0~alpha3-0ubuntu5",
        "1.0.0~alpha3-0ubuntu6",
        "1.0.0~alpha3-0ubuntu7",
        "1.0.0~alpha3-0ubuntu8",
        "1.0.0~beta1-0ubuntu1",
        "1.0.0~beta1-0ubuntu2",
        "1.0.0~beta1-0ubuntu3",
        "1.0.0~beta2-0ubuntu1",
        "1.0.0~beta2-0ubuntu2",
        "1.0.0~beta3-0ubuntu1",
        "1.0.0~beta4-0ubuntu1",
        "1.0.0~beta4-0ubuntu2",
        "1.0.0~rc1-0ubuntu2",
        "1.0.0~rc3-0ubuntu1",
        "1.0.0~rc4-0ubuntu1",
        "1.0.0-0ubuntu1",
        "1.0.0-0ubuntu2",
        "1.0.0-0ubuntu3",
        "1.0.0-0ubuntu4",
        "1.0.1-0ubuntu1",
        "1.0.2-0ubuntu1",
        "1.0.2-0ubuntu2",
        "1.0.3-0ubuntu1",
        "1.0.3-0ubuntu2",
        "1.0.3-0ubuntu3",
        "1.0.4-0ubuntu0.1",
        "1.0.5-0ubuntu0.1",
        "1.0.6-0ubuntu0.1",
        "1.0.7-0ubuntu0.1",
        "1.0.7-0ubuntu0.2"
      ]
    }
  ],
  "aliases": [],
  "details": "lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.",
  "id": "UBUNTU-CVE-2015-1335",
  "modified": "2026-04-22T07:37:46Z",
  "published": "2015-09-29T14:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-1335"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2753-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-1335"
    }
  ],
  "related": [
    "USN-2753-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2015-1335"
  ]
}

CVE-2015-1335 (GCVE-0-2015-1335)

Vulnerability from cvelistv5 – Published: 2015-10-01 20:00 – Updated: 2024-08-06 04:40

Summary

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.

Severity

No CVSS data available.

CWE

Assigner

canonical

References

13 references

URL	Tags
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://lists.linuxcontainers.org/pipermail/lxc-d…	mailing-listx_refsource_MLIST
http://www.debian.org/security/2015/dsa-3400	vendor-advisoryx_refsource_DEBIAN
https://bugs.launchpad.net/ubuntu/+source/lxc/+bu…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/76894	vdb-entryx_refsource_BID
https://github.com/lxc/lxc/commit/592fd47a6245508…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2015/09/29/4	mailing-listx_refsource_MLIST
http://www.ubuntu.com/usn/USN-2753-1	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-updates/2015-1…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2015-09-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:40:18.564Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2015-9f8f4b182a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html"
          },
          {
            "name": "[lxc-devel] 20150929 LXC security issue - affects all supported releases",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html"
          },
          {
            "name": "DSA-3400",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3400"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "76894",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76894"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be"
          },
          {
            "name": "[oss-security] 20150929 Security issue in LXC (CVE-2015-1335)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/09/29/4"
          },
          {
            "name": "USN-2753-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2753-1"
          },
          {
            "name": "FEDORA-2015-211974138f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171358.html"
          },
          {
            "name": "FEDORA-2015-ebfe46536f",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171364.html"
          },
          {
            "name": "openSUSE-SU-2015:1717",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html"
          },
          {
            "name": "openSUSE-SU-2019:1481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-09-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-05-31T20:06:03.000Z",
        "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "shortName": "canonical"
      },
      "references": [
        {
          "name": "FEDORA-2015-9f8f4b182a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html"
        },
        {
          "name": "[lxc-devel] 20150929 LXC security issue - affects all supported releases",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html"
        },
        {
          "name": "DSA-3400",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3400"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "76894",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76894"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be"
        },
        {
          "name": "[oss-security] 20150929 Security issue in LXC (CVE-2015-1335)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/09/29/4"
        },
        {
          "name": "USN-2753-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2753-1"
        },
        {
          "name": "FEDORA-2015-211974138f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171358.html"
        },
        {
          "name": "FEDORA-2015-ebfe46536f",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171364.html"
        },
        {
          "name": "openSUSE-SU-2015:1717",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html"
        },
        {
          "name": "openSUSE-SU-2019:1481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@ubuntu.com",
          "ID": "CVE-2015-1335",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2015-9f8f4b182a",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html"
            },
            {
              "name": "[lxc-devel] 20150929 LXC security issue - affects all supported releases",
              "refsource": "MLIST",
              "url": "https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html"
            },
            {
              "name": "DSA-3400",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3400"
            },
            {
              "name": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662",
              "refsource": "CONFIRM",
              "url": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
            },
            {
              "name": "76894",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/76894"
            },
            {
              "name": "https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be",
              "refsource": "CONFIRM",
              "url": "https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be"
            },
            {
              "name": "[oss-security] 20150929 Security issue in LXC (CVE-2015-1335)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/09/29/4"
            },
            {
              "name": "USN-2753-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2753-1"
            },
            {
              "name": "FEDORA-2015-211974138f",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171358.html"
            },
            {
              "name": "FEDORA-2015-ebfe46536f",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171364.html"
            },
            {
              "name": "openSUSE-SU-2015:1717",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html"
            },
            {
              "name": "openSUSE-SU-2019:1481",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
    "assignerShortName": "canonical",
    "cveId": "CVE-2015-1335",
    "datePublished": "2015-10-01T20:00:00.000Z",
    "dateReserved": "2015-01-22T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:40:18.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-2753-1

Vulnerability from osv_ubuntu

Published

2015-09-29 16:15

Modified

2026-04-22 07:36

Summary

lxc vulnerability

Details

Roman Fiedler discovered a directory traversal flaw in lxc-start. A local attacker with access to an LXC container could exploit this flaw to run programs inside the container that are not confined by AppArmor or expose unintended files in the host to the container.

References

URL

Type

	https://ubuntu.com/security/notices/USN-2753-1	ADVISORY
	https://ubuntu.com/security/CVE-2015-1335	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-1335",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "liblxc1",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc-templates",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "lxc-tests",
            "binary_version": "1.0.7-0ubuntu0.5"
          },
          {
            "binary_name": "python3-lxc",
            "binary_version": "1.0.7-0ubuntu0.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "lxc",
        "purl": "pkg:deb/ubuntu/lxc@1.0.7-0ubuntu0.5?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.7-0ubuntu0.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.0~alpha1-0ubuntu11",
        "1.0.0~alpha2-0ubuntu1",
        "1.0.0~alpha2-0ubuntu3",
        "1.0.0~alpha2-0ubuntu4",
        "1.0.0~alpha2-0ubuntu5",
        "1.0.0~alpha2-0ubuntu6",
        "1.0.0~alpha3-0ubuntu1",
        "1.0.0~alpha3-0ubuntu2",
        "1.0.0~alpha3-0ubuntu3",
        "1.0.0~alpha3-0ubuntu4",
        "1.0.0~alpha3-0ubuntu5",
        "1.0.0~alpha3-0ubuntu6",
        "1.0.0~alpha3-0ubuntu7",
        "1.0.0~alpha3-0ubuntu8",
        "1.0.0~beta1-0ubuntu1",
        "1.0.0~beta1-0ubuntu2",
        "1.0.0~beta1-0ubuntu3",
        "1.0.0~beta2-0ubuntu1",
        "1.0.0~beta2-0ubuntu2",
        "1.0.0~beta3-0ubuntu1",
        "1.0.0~beta4-0ubuntu1",
        "1.0.0~beta4-0ubuntu2",
        "1.0.0~rc1-0ubuntu2",
        "1.0.0~rc3-0ubuntu1",
        "1.0.0~rc4-0ubuntu1",
        "1.0.0-0ubuntu1",
        "1.0.0-0ubuntu2",
        "1.0.0-0ubuntu3",
        "1.0.0-0ubuntu4",
        "1.0.1-0ubuntu1",
        "1.0.2-0ubuntu1",
        "1.0.2-0ubuntu2",
        "1.0.3-0ubuntu1",
        "1.0.3-0ubuntu2",
        "1.0.3-0ubuntu3",
        "1.0.4-0ubuntu0.1",
        "1.0.5-0ubuntu0.1",
        "1.0.6-0ubuntu0.1",
        "1.0.7-0ubuntu0.1",
        "1.0.7-0ubuntu0.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Roman Fiedler discovered a directory traversal flaw in lxc-start. A local\nattacker with access to an LXC container could exploit this flaw to run\nprograms inside the container that are not confined by AppArmor or expose\nunintended files in the host to the container.\n",
  "id": "USN-2753-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-09-29T16:15:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2753-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-1335"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "lxc vulnerability",
  "upstream": [
    "UBUNTU-CVE-2015-1335"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2015-1335

Vulnerability from osv_ubuntu

CVE-2015-1335 (GCVE-0-2015-1335)

usn-2753-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature