{"id":"CVE-2013-6441","aliases":["DEBIAN-CVE-2013-6441","DLA-442-1","EUVD-2013-6249","GHSA-5m9h-29cp-r3fg","MGASA-2014-0102","SUSE-RU-2015:0992-1","UBUNTU-CVE-2013-6441"],"status":"published","title":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write...","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00498,"percentile":0.4301,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2013-12-31T00:00:00Z","modified":"2026-09-01T20:02:15Z","fixes":[{"ecosystem":"Debian:12","package":"lxc","fixed_in":["1.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lxc","fixed_in":["1.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lxc","fixed_in":["1.0.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"lxc","fixed_in":["0.8.0-1.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"lxc","fixed_in":["0.9.0-5.1.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-1+deb6u1"}]}],"versions":["0.7.2-1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:3","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-1.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-5.1.mga4"}]}]}],"products":[{"vendor":"linuxcontainers","product":"lxc"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-2104-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/%2Bsource/lxc/%2Bbug/1261045","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/lxc/lxc/commit/f4d5cc8e1f39d132b61e110674528cac727ae0e2","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"https://github.com/dotcloud/lxc/pull/1","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6441"},{"url":"https://github.com/advisories/GHSA-5m9h-29cp-r3fg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6441","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0102.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=12760","tags":["report"]},{"url":"http://www.ubuntu.com/usn/usn-2104-1/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150992-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/835585","tags":["report"]},{"url":"https://bugzilla.suse.com/839653","tags":["report"]},{"url":"https://bugzilla.suse.com/839663","tags":["report"]},{"url":"https://bugzilla.suse.com/855809","tags":["report"]},{"url":"https://bugzilla.suse.com/869663","tags":["report"]},{"url":"https://bugzilla.suse.com/924891","tags":["report"]},{"url":"https://bugzilla.suse.com/924892","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6441","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2013-6441","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2104-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6441","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-6441","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2014-02-14T15:00:00Z","modified":"2024-08-06T17:39:01.387Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-6249","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2014-02-14T15:00:00Z","modified":"2024-08-06T17:39:01Z","updated_at":"2026-11-03T01:56:26.306678Z"}],"ghsa":[{"id":"GHSA-5m9h-29cp-r3fg","title":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write...","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2022-05-17T04:52:52Z","modified":"2023-01-28T05:02:43Z","updated_at":"2026-11-02T14:43:49.735086Z"}],"nvd":[{"id":"CVE-2013-6441","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2014-02-14T15:55:05.237Z","modified":"2026-06-17T00:00:29.98Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-6441","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2014-02-14T15:55:05Z","modified":"2026-04-16T06:16:04.289260591Z","updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2013-6441","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"published","published":"2014-02-14T15:55:05.237Z","modified":"2026-09-01T20:02:15.40407166Z","updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"DLA-442-1","title":"lxc - security update","status":"published","published":"2016-02-29T00:00:00Z","modified":"2026-03-09T02:09:29.725073Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2014-0102","title":"Updated lxc packages fix security vulnerability","description":"Florian Sagar discovered that the LXC sshd template set incorrect mount\npermissions. An attacker could possibly use this flaw to cause privilege\nescalation on the host (CVE-2013-6441).\n","status":"published","published":"2014-02-26T18:23:25Z","modified":"2026-04-16T06:24:51.895027309Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"SUSE-RU-2015:0992-1","title":"Security update for lxc","description":"\nThe container framework LXC has been updated to fix various bugs and a \nsecurity issue:\n\n    * CVE-2013-6441: The sshd template allowed privilege escalation on the\n      host.\n    * SLES container time not aligned with host time (bnc#839653)\n    * SLES container boot takes ages (bnc#839663)\n    * lxc mounts /dev/pts with wrong options (bnc#869663)\n\nSecurity Issues:\n\n    * CVE-2013-6441\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6441\u003e\n\n","status":"published","published":"2014-04-01T09:58:11Z","modified":"2025-05-02T03:45:30.2852Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2013-6441","description":"The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.","status":"withdrawn","published":"2013-12-31T00:00:00Z","modified":"2026-02-04T02:51:01.43827Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}