CVE-2017-5985
- State
- Published
- Severity
- Not scored
- Published
- Mar 14, 2017
- Updated
- Aug 5, 2024
- Reserved
- Feb 13, 2017
Description
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [lxc-devel] 20170309 Security fix for CVE-2017-5985 (lxc-user-nic)mailing-list
- https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9
- 96777vdb-entry
- https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676
- USN-3224-1vendor-advisory
- [oss-security] 20170309 LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownershipmailing-list
- openSUSE-SU-2019:1481vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.