Description (CNA)
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ubuntu / LXD | affected unspecified before 0.19-0ubuntu5 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.