CVE-2015-1335

High

Published: 01/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A vulnerability in lxc before version 1.0.8 and 1.1.x before version 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on (1) mount target or (2) bind mount source.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to data leakage or system takeover.

Recommendation

It is recommended to update lxc to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in lxc

CVE-2026-39402Medium
lxc, a Linux container runtime, has a logic flaw in the find_line() function of the setuid helper lxc-user-nic, allowing an unprivileged user to delete OVS-attached network interfaces belonging to other users. This affects multi-tenant environments using OpenVSwitch bridges. An attacker can repeatedly disconnect networking from containers of other tenants, causing denial of service. The issue is fixed in version 7.0.0.

Original NVD description (English source)

lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.