Approved changes feed: RSS · Atom

cpe:2.3:a:linuxcontainers:lxd:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorLinuxcontainers (006f7d4f-fe5b-55a6-92a3-15dcb41d3a32)
ProductLxd (8c7c3ac8-873e-540f-a2a6-1ffc904ea361)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/lxd purl2cpe 2026-06-01 10:16:11.535737
pkg:deb/ubuntu/lxd purl2cpe 2026-06-01 10:16:11.535740
pkg:github/lxc/lxd purl2cpe 2026-06-01 10:16:11.535742
pkg:rpm/opensuse/lxd purl2cpe 2026-06-01 10:16:11.535745

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1340 vulnerable 2026-06-08 05:06:25.391720 chmod race in doUidshiftIntoContainer
HIGH (7)
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
Published: 2019-04-22T15:35:59.288Z
Updated: 2024-09-17T01:10:47.579Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.