GitHub Advisoryadvisory · Go

GHSA-8mpq-fmr3-6jxv LXD vulnerable to Race Condition

HIGH Published 2022-05-24 Modified 2023-09-29 Official page ↗
Aliases
CVE-2015-1340
Ecosystem
Go
Packages
github.com/lxc/lxd
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-362
Reviewed
2023-02-07

Affected packages

• Go github.com/lxc/lxd: < 0.0.0-20151004155856-19c6961cc101 → fixed in 0.0.0-20151004155856-19c6961cc101

Description

LXD before version 0.19-0ubuntu5 `doUidshiftIntoContainer()` has an unsafe `Chmod()` call that races against the stat in the `Filepath.Walk()` function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice. Specific Go Packages Affected github.com/lxc/lxd/shared

Related

Alias · CVE (1)

  • CVE-2015-1340 LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk()… vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References