CVE-2015-8222

Summary

The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.

Impact & exploitability

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Official patch: http://www.ubuntu.com/usn/USN-2809-1 ↗

Additional information

• NVD record
• http://www.ubuntu.com/usn/USN-2809-1Patch
• https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1515689
• https://github.com/lxc/lxd/issues/1307