Vulnerabilities > Linuxcontainers > LXC > Low

DATE CVE VULNERABILITY TITLE RISK
2023-01-01 CVE-2022-47952 Information Exposure Through Discrepancy vulnerability in Linuxcontainers LXC
lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates that a file exists.
local
low complexity
linuxcontainers CWE-203
3.3
2018-08-10 CVE-2018-6556 Channel and Path Errors vulnerability in multiple products
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path.
2.1
2017-03-14 CVE-2017-5985 Missing Authorization vulnerability in Linuxcontainers LXC
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
local
low complexity
linuxcontainers CWE-862
2.1