{"id":"CVE-2015-1335","aliases":["DEBIAN-CVE-2015-1335","DLA-442-1","DSA-3400-1","EUVD-2015-1475","GHSA-6jr3-ph3x-8q66","MGASA-2016-0036","SUSE-SU-2015:1829-1","UBUNTU-CVE-2015-1335","USN-2753-1","openSUSE-SU-2024:10416-1"],"status":"published","title":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00459,"percentile":0.40038,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2015-09-29T14:00:00Z","modified":"2026-09-09T06:47:24Z","fixes":[{"ecosystem":"Debian:12","package":"lxc","fixed_in":["1:1.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lxc","fixed_in":["1:1.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lxc","fixed_in":["1:1.0.8-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"lxc","fixed_in":["1:1.0.6-6+deb8u2"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"lxc","fixed_in":["1.0.8-1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"lxc","fixed_in":["0.8.0-0.25.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"lxc","fixed_in":["1.0.7-0ubuntu0.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.8-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-1+deb6u1"}]}],"versions":["0.7.2-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.6-6+deb8u2"}]}],"versions":["1:1.0.6-6","1:1.0.6-6+deb8u1","1:1.0.6-6+deb8u1~bpo70+1","1:1.0.6-6+deb8u2~bpo70+1"]},{"source":"osv","ecosystem":"Mageia:5","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.8-1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-0.25.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-0ubuntu0.5"}]}],"versions":["1.0.0~alpha1-0ubuntu11","1.0.0~alpha2-0ubuntu1","1.0.0~alpha2-0ubuntu3","1.0.0~alpha2-0ubuntu4","1.0.0~alpha2-0ubuntu5","1.0.0~alpha2-0ubuntu6","1.0.0~alpha3-0ubuntu1","1.0.0~alpha3-0ubuntu2","1.0.0~alpha3-0ubuntu3","1.0.0~alpha3-0ubuntu4","1.0.0~alpha3-0ubuntu5","1.0.0~alpha3-0ubuntu6","1.0.0~alpha3-0ubuntu7","1.0.0~alpha3-0ubuntu8","1.0.0~beta1-0ubuntu1","1.0.0~beta1-0ubuntu2","1.0.0~beta1-0ubuntu3","1.0.0~beta2-0ubuntu1","1.0.0~beta2-0ubuntu2","1.0.0~beta3-0ubuntu1","1.0.0~beta4-0ubuntu1","1.0.0~beta4-0ubuntu2","1.0.0~rc1-0ubuntu2","1.0.0~rc3-0ubuntu1","1.0.0~rc4-0ubuntu1","1.0.0-0ubuntu1","1.0.0-0ubuntu2","1.0.0-0ubuntu3","1.0.0-0ubuntu4","1.0.1-0ubuntu1","1.0.2-0ubuntu1","1.0.2-0ubuntu2","1.0.3-0ubuntu1","1.0.3-0ubuntu2","1.0.3-0ubuntu3","1.0.4-0ubuntu0.1","1.0.5-0ubuntu0.1","1.0.6-0ubuntu0.1","1.0.7-0ubuntu0.1","1.0.7-0ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-0ubuntu0.5"}]}],"versions":["1.0.0~alpha1-0ubuntu11","1.0.0~alpha2-0ubuntu1","1.0.0~alpha2-0ubuntu3","1.0.0~alpha2-0ubuntu4","1.0.0~alpha2-0ubuntu5","1.0.0~alpha2-0ubuntu6","1.0.0~alpha3-0ubuntu1","1.0.0~alpha3-0ubuntu2","1.0.0~alpha3-0ubuntu3","1.0.0~alpha3-0ubuntu4","1.0.0~alpha3-0ubuntu5","1.0.0~alpha3-0ubuntu6","1.0.0~alpha3-0ubuntu7","1.0.0~alpha3-0ubuntu8","1.0.0~beta1-0ubuntu1","1.0.0~beta1-0ubuntu2","1.0.0~beta1-0ubuntu3","1.0.0~beta2-0ubuntu1","1.0.0~beta2-0ubuntu2","1.0.0~beta3-0ubuntu1","1.0.0~beta4-0ubuntu1","1.0.0~beta4-0ubuntu2","1.0.0~rc1-0ubuntu2","1.0.0~rc3-0ubuntu1","1.0.0~rc4-0ubuntu1","1.0.0-0ubuntu1","1.0.0-0ubuntu2","1.0.0-0ubuntu3","1.0.0-0ubuntu4","1.0.1-0ubuntu1","1.0.2-0ubuntu1","1.0.2-0ubuntu2","1.0.3-0ubuntu1","1.0.3-0ubuntu2","1.0.3-0ubuntu3","1.0.4-0ubuntu0.1","1.0.5-0ubuntu0.1","1.0.6-0ubuntu0.1","1.0.7-0ubuntu0.1","1.0.7-0ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-2.1"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linuxcontainers","product":"lxc"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170045.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.linuxcontainers.org/pipermail/lxc-devel/2015-September/012434.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.debian.org/security/2015/dsa-3400","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/76894","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://github.com/lxc/lxc/commit/592fd47a6245508b79fe6ac819fe6d3b2c1289be","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2015/09/29/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2753-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171358.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171364.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-10/msg00023.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1335"},{"url":"https://github.com/advisories/GHSA-6jr3-ph3x-8q66"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1335","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0036.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16855","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151829-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/946744","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1335","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1335","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2753-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1335","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8649","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1335","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-10-01T20:00:00Z","modified":"2024-08-06T04:40:18.564Z","updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-1475","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-10-01T20:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:16.145787Z"}],"ghsa":[{"id":"GHSA-6jr3-ph3x-8q66","title":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to...","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2022-05-14T00:59:46Z","modified":"2023-02-02T05:02:50Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:51:31.346473Z"}],"nvd":[{"id":"CVE-2015-1335","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-10-01T20:59:00.1Z","modified":"2026-06-17T00:22:12.97Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:03:09.92183Z"}],"osv":[{"id":"CVE-2015-1335","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-10-01T20:59:00Z","modified":"2026-04-16T06:15:19.538060072Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1335","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-10-01T20:59:00.1Z","modified":"2026-09-09T06:47:24.508046759Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-442-1","title":"lxc - security update","status":"published","published":"2016-02-29T00:00:00Z","modified":"2026-03-09T02:09:29.725073Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-3400-1","title":"lxc - security update","status":"published","published":"2015-11-19T00:00:00Z","modified":"2026-03-09T01:23:03.997142Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0036","title":"Updated lxc packages fix security vulnerability","description":"A directory traversal flaw while lxc-start in lxc before 1.0.8 in\ninitially setting up the mounts for a container (CVE-2015-1335).\n","status":"published","published":"2016-01-29T11:02:50Z","modified":"2026-04-16T06:25:15.935661654Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10416-1","title":"liblxc-devel-2.0.4-2.1 on GA media","description":"These are all security issues fixed in the liblxc-devel-2.0.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:17.53428Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2015:1829-1","title":"Security update for lxc","description":"lxc was update to fix one security issue.\n\nThe following vulnerability was fixed:\n\n* CVE-2015-1335: A directory traversal flaw while lxc-start is initially setting up the mounts for a container (bsc#946744)\n","status":"published","published":"2015-10-05T09:36:38Z","modified":"2026-02-04T03:20:28.404159Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-1335","description":"lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.","status":"published","published":"2015-09-29T14:00:00Z","modified":"2026-04-22T10:02:23.809578Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2753-1","title":"lxc vulnerability","description":"Roman Fiedler discovered a directory traversal flaw in lxc-start. A local\nattacker with access to an LXC container could exploit this flaw to run\nprograms inside the container that are not confined by AppArmor or expose\nunintended files in the host to the container.\n","status":"published","published":"2015-09-29T16:15:44Z","modified":"2026-04-22T09:17:15.281642Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}