oss-sec mailing list archives

Re: Security issues in LXC (CVE-2015-1331 and CVE-2015-1334)


From: Fiedler Roman <Roman.Fiedler () ait ac at>
Date: Wed, 22 Jul 2015 16:16:57 +0000

Von: Tyler Hicks [mailto:tyhicks () canonical com]

Two security issues were found in LXC:

[snip]

To help others discover similar issues, not only in container virtualization
e.g. LXC, Docker, Vserver,  OpenVZ, but also other programs, I've written up
the basic analysis methods used during testing in [1]. Detection examples
for the not yet disclosed vulnerabilities are omitted and will be included
in future release.

Roman

[1] https://service.ait.ac.at/security/2015/LxcSecurityAnalysis.txt (.html)

Attachment: smime.p7s
Description:


Current thread: