CVE 2015-1331

lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.

Related bugs and status

CVE-2015-1331 (Candidate) is related to these bugs:

Bug #1470842: lxc tools lock handling vulnerable to symlink attack

Summary				In	Importance	Status
	1470842	lxc tools lock handling vulnerable to symlink attack		lxc (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.