CVE-2015-1340 — chmod race in doUidshiftIntoContainer
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in tha…
Published: 2019-04-22 · CVSS: 7.0 · CVSS 3.0
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7