CVE-2017-5985

Priority
Medium
Description
lxc-user-nic in Linux Containers (LXC) allows local users with a
lxc-usernet allocation to create network interfaces on the host and choose
the name of those interfaces by leveraging lack of netns ownership check.
References
Bugs
Assigned-to
tyhicks
Package
Source: lxc (LP Ubuntu Debian)
Upstream:needs-triage
Ubuntu 12.04 LTS (Precise Pangolin):not-affected (lxc-user-nic doesn't exist)
Ubuntu 14.04 LTS (Trusty Tahr):released (1.0.9-0ubuntu3)
Ubuntu Touch 15.04:needs-triage
Ubuntu Core 15.04:DNE
Ubuntu 16.04 LTS (Xenial Xerus):released (2.0.7-0ubuntu1~16.04.2)
Ubuntu 16.10 (Yakkety Yak):released (2.0.7-0ubuntu1~16.10.2)
Ubuntu 17.04 (Zesty Zapus):released (2.0.7-0ubuntu2)
Patches:
Upstream:https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9
More Information

Updated: 2017-03-15 16:14:35 UTC (commit 12256)