CVE-2015-1340: chmod race in doUidshiftIntoContainer
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
Specific Go Packages Affected github.com/lxc/lxd/shared
Other sources
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2015-1340?
CVE-2015-1340 is a vulnerability in LXD before version 0.19-0ubuntu5 that allows an attacker to create a symbolic link and modify the mode of any file on the system.
What is the severity of CVE-2015-1340?
CVE-2015-1340 has a severity value of 8.1, which is considered high.
How does CVE-2015-1340 affect the affected software?
CVE-2015-1340 affects the LXD package before version 0.19-0ubuntu5 and Linuxcontainers Lxd.
How can I fix CVE-2015-1340?
To fix CVE-2015-1340, update the LXD package to version 0.19-0ubuntu5 or later.
Where can I find more information about CVE-2015-1340?
You can find more information about CVE-2015-1340 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2015-1340), [GitHub Commit](https://github.com/lxc/lxd/commit/19c6961cc1012c8a529f20807328a9357f5034f4), [GitHub Pull Request](https://github.com/lxc/lxd/pull/1189).