CVE-2016-10124: High severity linuxcontainers Lxc vulnerability
An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via lxc-attach, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an attacker to escape the container.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10124?
CVE-2016-10124 is considered a high-severity vulnerability due to its potential to allow unprivileged users to escape Linux Containers.
How do I fix CVE-2016-10124?
To fix CVE-2016-10124, update LXC to the latest version available beyond 2.0.0 as it includes the necessary security patches.
What versions of LXC are affected by CVE-2016-10124?
CVE-2016-10124 affects LXC versions prior to 2.0.0-rc1, with vulnerabilities present in all versions up to this point.
What are the potential impacts of CVE-2016-10124?
The potential impacts of CVE-2016-10124 include unauthorized access and privilege escalation from a container to the host system.
Can CVE-2016-10124 be exploited remotely?
CVE-2016-10124 is primarily an issue relevant to local users, but it poses risks that can be exploited if local access is compromised.