CVE-2017-5985
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create...
CVE-2017-5985 is a low vulnerability (CVSS 3.3) in Linuxcontainers Lxc, published March 9, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in lxc 1:2.0.7-2.
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
CVE-2017-5985- CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-862
- Updated
- 2026-11-02
CVE List No score
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
CVE-2017-5985- Updated
- 2026-11-02
EUVDEUVD-2017-15054 No score
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
EUVD-2017-15054- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wxh2-mqg8-qff6
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create...
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
GHSA-wxh2-mqg8-qff6- CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-862
- Updated
- 2026-11-02
OSV
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
CVE-2017-5985- CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-5985
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
DEBIAN-CVE-2017-5985- CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2017-5985
lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.
- Record
UBUNTU-CVE-2017-5985- CVSS 3.0
- 3.3 Low
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVMGASA-2017-0167 No score
Updated lxc packages fix security vulnerabilities
Roman Fiedler discovered a directory traversal flaw in lxc-attach. An attacker with access to an LXC container could exploit this flaw to access files outside of the container (CVE-2016-8649).
Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create virtual network interfaces in network namespaces that they do not own (CVE-2017-5985).
The lxc package has been updated to version 1.0.10 to fix these issues and other bugs.
- Record
MGASA-2017-0167- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11030-1 No score
liblxc-devel-4.0.9-1.1 on GA media
These are all security issues fixed in the liblxc-devel-4.0.9-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11030-1- Updated
- 2026-11-02
OSVUSN-3224-1 No score
lxc vulnerability
Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create virtual network interfaces in network namespaces that they do not own.
- Record
USN-3224-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lxcDebian:12 |
before 1:2.0.7-2 | 1:2.0.7-2 |
lxcDebian:13 |
before 1:2.0.7-2 | 1:2.0.7-2 |
lxcDebian:14 |
before 1:2.0.7-2 | 1:2.0.7-2 |
lxcMageia:5 |
before 1.0.10-1.mga5 | 1.0.10-1.mga5 |
lxcUbuntu:14.04:LTS |
before 1.0.9-0ubuntu3, plus listed versions 1.0.0~alpha1-0ubuntu111.0.0~alpha2-0ubuntu11.0.0~alpha2-0ubuntu31.0.0~alpha2-0ubuntu41.0.0~alpha2-0ubuntu5 Show 43 moreShow less1.0.0~alpha2-0ubuntu61.0.0~alpha3-0ubuntu11.0.0~alpha3-0ubuntu21.0.0~alpha3-0ubuntu31.0.0~alpha3-0ubuntu41.0.0~alpha3-0ubuntu51.0.0~alpha3-0ubuntu61.0.0~alpha3-0ubuntu71.0.0~alpha3-0ubuntu81.0.0~beta1-0ubuntu11.0.0~beta1-0ubuntu21.0.0~beta1-0ubuntu31.0.0~beta2-0ubuntu11.0.0~beta2-0ubuntu21.0.0~beta3-0ubuntu11.0.0~beta4-0ubuntu11.0.0~beta4-0ubuntu21.0.0~rc1-0ubuntu21.0.0~rc3-0ubuntu11.0.0~rc4-0ubuntu11.0.0-0ubuntu11.0.0-0ubuntu21.0.0-0ubuntu31.0.0-0ubuntu41.0.1-0ubuntu11.0.2-0ubuntu11.0.2-0ubuntu21.0.3-0ubuntu11.0.3-0ubuntu21.0.3-0ubuntu31.0.4-0ubuntu0.11.0.5-0ubuntu0.11.0.6-0ubuntu0.11.0.7-0ubuntu0.11.0.7-0ubuntu0.21.0.7-0ubuntu0.51.0.7-0ubuntu0.61.0.7-0ubuntu0.71.0.7-0ubuntu0.91.0.7-0ubuntu0.101.0.8-0ubuntu0.31.0.8-0ubuntu0.41.0.9-0ubuntu2 |
1.0.9-0ubuntu3 |
lxcUbuntu:16.04:LTS |
before 2.0.7-0ubuntu1~16.04.2, plus listed versions 1.1.4-0ubuntu11.1.4-0ubuntu1.11.1.4-0ubuntu31.1.5-0ubuntu11.1.5-0ubuntu2 Show 31 moreShow less1.1.5-0ubuntu31.1.5-0ubuntu41.1.5-0ubuntu51.1.5-0ubuntu62.0.0~beta2-0ubuntu22.0.0~rc1-0ubuntu12.0.0~rc2-0ubuntu22.0.0~rc3-0ubuntu12.0.0~rc3-0ubuntu22.0.0~rc3-0ubuntu32.0.0~rc4-0ubuntu12.0.0~rc5-0ubuntu12.0.0~rc9-0ubuntu12.0.0~rc10-0ubuntu12.0.0~rc10-0ubuntu22.0.0~rc11-0ubuntu12.0.0~rc12-0ubuntu12.0.0~rc13-0ubuntu22.0.0~rc14-0ubuntu22.0.0~rc15-0ubuntu12.0.0-0ubuntu12.0.0-0ubuntu22.0.1-0ubuntu1~16.04.12.0.3-0ubuntu1~ubuntu16.04.12.0.4-0ubuntu1~ubuntu16.04.22.0.5-0ubuntu1~ubuntu16.04.12.0.5-0ubuntu1~ubuntu16.04.22.0.5-0ubuntu1~ubuntu16.04.32.0.6-0ubuntu1~ubuntu16.04.12.0.6-0ubuntu1~ubuntu16.04.22.0.7-0ubuntu1~16.04.1 |
2.0.7-0ubuntu1~16.04.2 |
lxcopenSUSE:Tumbleweed |
before 4.0.9-1.1 | 4.0.9-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.html
github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9
securityfocus.com/bid/96777
bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676
ubuntu.com/usn/USN-3224-1
openwall.com/lists/oss-security/2017/03/09/4
Show 17 moreShow less
lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
nvd.nist.gov/vuln/detail/CVE-2017-5985
security-tracker.debian.org/tracker/CVE-2017-5985
advisories.mageia.org/MGASA-2017-0167.html
bugs.mageia.org/show_bug.cgi?id=20439
linuxcontainers.org/lxc/news
ubuntu.com/security/CVE-2017-5985
cve.org/CVERecord?id=CVE-2017-5985
suse.com/security/cve/CVE-2017-5985