CVE-2017-5985

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

CVSS v3.0 3.3 LOW
CVSS v2.0 2.1 LOW

3.3^/10

CVSS v3.0 : LOW

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html	Vendor Advisory
https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9	Issue Tracking Patch
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676	Third Party Advisory
http://www.ubuntu.com/usn/USN-3224-1	Third Party Advisory
http://www.securityfocus.com/bid/96777	Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2017/03/09/4	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:linuxcontainers:lxc::::::::
	cpe:2.3:a:linuxcontainers:lxc::::::::

Information

Published : 2017-03-14 10:59

Updated : 2019-10-02 17:03

NVD link : CVE-2017-5985

Mitre link : CVE-2017-5985

JSON object : View

CWE

CWE-862

Missing Authorization

Advertisement

Products Affected

linuxcontainers

lxc

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html", "name": "[lxc-devel] 20170309 Security fix for CVE-2017-5985 (lxc-user-nic)", "tags": ["Vendor Advisory"], "refsource": "MLIST"}, {"url": "https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9", "name": "https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9", "tags": ["Issue Tracking", "Patch"], "refsource": "CONFIRM"}, {"url": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676", "name": "https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.ubuntu.com/usn/USN-3224-1", "name": "USN-3224-1", "tags": ["Third Party Advisory"], "refsource": "UBUNTU"}, {"url": "http://www.securityfocus.com/bid/96777", "name": "96777", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://www.openwall.com/lists/oss-security/2017/03/09/4", "name": "[oss-security] 20170309 LXC: CVE-2017-5985: lxc-user-nic didn't verify network namespace ownership", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "MLIST"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html", "name": "openSUSE-SU-2019:1481", "tags": [], "refsource": "SUSE"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-862"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-5985", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}}, "publishedDate": "2017-03-14T17:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.0.9"}, {"cpe23Uri": "cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.0.6", "versionStartIncluding": "2.0.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2019-10-03T00:03Z"}