CVE-2015-1334

Name	CVE-2015-1334
Description	attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux confinement by mounting a proc filesystem with a crafted (1) AppArmor profile or (2) SELinux label.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DSA-3317-1
Debian Bugs	793298

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
lxc (PTS)	buster	1:3.1.0+really3.0.3-8	fixed
	bullseye	1:4.0.6-2+deb11u2	fixed
	bookworm, sid	1:5.0.2-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
lxc	source	squeeze	(not affected)
lxc	source	wheezy	(not affected)
lxc	source	jessie	1:1.0.6-6+deb8u1	DSA-3317-1
lxc	source	(unstable)	1:1.0.7-4		793298

[wheezy] - lxc <not-affected> (Affects 0.9.0 and higher)
[squeeze] - lxc <not-affected> (Affects 0.9.0 and higher)