Canonical Lxcfs vulnerabilities

2 CVEs affecting Canonical Lxcfs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1344, published 2015-12-07.

More from Canonical.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1342, published 2015-12-07. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.
• CVE-2015-1344, published 2015-12-07. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file.