CVE-2016-1581 | BDVDB-2026-76336 Detail

Description#

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://linuxcontainers.org/lxd/news/
http://www.ubuntu.com/usn/USN-2988-1

Exploit#

No public exploit known

History#

Version 12016-06-09Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.