Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2015-8222

The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.

Related bugs and status

CVE-2015-8222 (Candidate) is related to these bugs:

Bug #1515689: Wrong mode on unix.socket when socket activated

		In	Importance	Status
1515689	Wrong mode on unix.socket when socket activated	lxd (Ubuntu)	Critical	Fix Released
1515689	Wrong mode on unix.socket when socket activated	lxd (Ubuntu Wily)	Critical	Fix Released
1515689	Wrong mode on unix.socket when socket activated	lxd (Ubuntu Xenial)	Critical	Fix Released
1515689	Wrong mode on unix.socket when socket activated	lxd (Ubuntu Trusty)	Critical	Fix Released

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://bugs.launchpad...
CONFIRM: https://github.com/lxc...
UBUNTU: USN-2809-1