CVE-2015-1335
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...
CVE-2015-1335 is a high vulnerability (CVSS 7.2) in Linuxcontainers Lxc, published September 29, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 39th percentile. Fixed in lxc 1:1.0.8-1.
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
Exploit likelihood
What each source reports
NVD Score used
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
CVE-2015-1335- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
CVE-2015-1335- Updated
- 2026-11-02
EUVDEUVD-2015-1475 No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
EUVD-2015-1475- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6jr3-ph3x-8q66 No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
GHSA-6jr3-ph3x-8q66- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
CVE-2015-1335- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-1335 No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
DEBIAN-CVE-2015-1335- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2016-0036 No score
Updated lxc packages fix security vulnerability
A directory traversal flaw while lxc-start in lxc before 1.0.8 in initially setting up the mounts for a container (CVE-2015-1335).
- Record
MGASA-2016-0036- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10416-1 No score
liblxc-devel-2.0.4-2.1 on GA media
These are all security issues fixed in the liblxc-devel-2.0.4-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10416-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1829-1 No score
Security update for lxc
lxc was update to fix one security issue.
The following vulnerability was fixed:
- CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container (bsc#946744)
- Record
SUSE-SU-2015:1829-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-1335 No score
lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.
- Record
UBUNTU-CVE-2015-1335- Updated
- 2026-11-02
OSVUSN-2753-1 No score
lxc vulnerability
Roman Fiedler discovered a directory traversal flaw in lxc-start. A local attacker with access to an LXC container could exploit this flaw to run programs inside the container that are not confined by AppArmor or expose unintended files in the host to the container.
- Record
USN-2753-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lxcDebian:12 |
before 1:1.0.8-1 | 1:1.0.8-1 |
lxcDebian:13 |
before 1:1.0.8-1 | 1:1.0.8-1 |
lxcDebian:14 |
before 1:1.0.8-1 | 1:1.0.8-1 |
lxcDebian:6.0 |
before 0.7.2-1+deb6u1, plus listed versions 0.7.2-1 |
0.7.2-1+deb6u1 |
lxcDebian:8 |
before 1:1.0.6-6+deb8u2, plus listed versions 1:1.0.6-61:1.0.6-6+deb8u11:1.0.6-6+deb8u1~bpo70+11:1.0.6-6+deb8u2~bpo70+1 |
1:1.0.6-6+deb8u2 |
lxcMageia:5 |
before 1.0.8-1.mga5 | 1.0.8-1.mga5 |
lxcSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Desktop 11 SP3 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Desktop 11 SP4 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lxcSUSE:Linux Enterprise Server 11 SP3 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Server 11 SP4 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 0.8.0-0.25.1 | 0.8.0-0.25.1 |
lxcUbuntu:14.04:LTS |
before 1.0.7-0ubuntu0.5, plus listed versions 1.0.0~alpha1-0ubuntu111.0.0~alpha2-0ubuntu11.0.0~alpha2-0ubuntu31.0.0~alpha2-0ubuntu41.0.0~alpha2-0ubuntu5 Show 35 moreShow less1.0.0~alpha2-0ubuntu61.0.0~alpha3-0ubuntu11.0.0~alpha3-0ubuntu21.0.0~alpha3-0ubuntu31.0.0~alpha3-0ubuntu41.0.0~alpha3-0ubuntu51.0.0~alpha3-0ubuntu61.0.0~alpha3-0ubuntu71.0.0~alpha3-0ubuntu81.0.0~beta1-0ubuntu11.0.0~beta1-0ubuntu21.0.0~beta1-0ubuntu31.0.0~beta2-0ubuntu11.0.0~beta2-0ubuntu21.0.0~beta3-0ubuntu11.0.0~beta4-0ubuntu11.0.0~beta4-0ubuntu21.0.0~rc1-0ubuntu21.0.0~rc3-0ubuntu11.0.0~rc4-0ubuntu11.0.0-0ubuntu11.0.0-0ubuntu21.0.0-0ubuntu31.0.0-0ubuntu41.0.1-0ubuntu11.0.2-0ubuntu11.0.2-0ubuntu21.0.3-0ubuntu11.0.3-0ubuntu21.0.3-0ubuntu31.0.4-0ubuntu0.11.0.5-0ubuntu0.11.0.6-0ubuntu0.11.0.7-0ubuntu0.11.0.7-0ubuntu0.2 |
1.0.7-0ubuntu0.5 |
lxcopenSUSE:Tumbleweed |
before 2.0.4-2.1 | 2.0.4-2.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html
lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html
debian.org/security/2015/dsa-3400
bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662
oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
securityfocus.com/bid/76894
Show 21 moreShow less
github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be
openwall.com/lists/oss-security/2015/09/29/4
ubuntu.com/usn/USN-2753-1
lists.opensuse.org/opensuse-updates/2015-10/msg00023.html
nvd.nist.gov/vuln/detail/CVE-2015-1335
security-tracker.debian.org/tracker/CVE-2015-1335
advisories.mageia.org/MGASA-2016-0036.html
bugs.mageia.org/show_bug.cgi?id=16855
suse.com/support/update/announcement/2015/suse-su-20151829-1
bugzilla.suse.com/946744
ubuntu.com/security/CVE-2015-1335
cve.org/CVERecord?id=CVE-2015-1335