Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 15.10 USN-2809-1 Moderate: LXD Privilege Escalation

ubuntu
Calendar Grey November 12, 2015
Scroller Ubuntu
LXD security flaw in Ubuntu 15.10 permits local adversaries to gain elevated privileges through improperly set socket permissions.
LXD could be made to run programs as an administrator.

Summary

LXD could be made to run programs as an administrator.

Software Description:

- lxd: Container hypervisor based on LXC

Details:

Jeroen Simonetti discovered that LXD incorrectly set socket permissions. A

local attacker could use this issue to escalate privileges.

Topics%20covered

Topics Covered

security advisory privilege escalation ubuntu socket permissions lxd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  lxd                             0.20-0ubuntu4.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2809-1

https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1515689

November 12, 2015

Topics%20covered

Topics Covered

security advisory privilege escalation ubuntu socket permissions lxd

Package Information

https://launchpad.net/ubuntu/+source/lxd/0.20-0ubuntu4.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.