CVE-2017-5985

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

• CWE-862

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
• http://www.openwall.com/lists/oss-security/2017/03/09/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96777Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-3224-1Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676Third Party Advisory
• https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9Issue Tracking, Patch
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html
• http://www.openwall.com/lists/oss-security/2017/03/09/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96777Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-3224-1Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1654676Third Party Advisory
• https://github.com/lxc/lxc/commit/16af238036a5464ae8f2420ed3af214f0de875f9Issue Tracking, Patch
• https://lists.linuxcontainers.org/pipermail/lxc-devel/2017-March/015535.htmlVendor Advisory

Published

Mar 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5979The prescan_entry function in fseeko.c in zziplib 0.13.62 al…
• CVE-2017-5980The zzip_mem_entry_new function in memdisk.c in zziplib 0.13…
• CVE-2017-5981seeko.c in zziplib 0.13.62 allows remote attackers to cause …
• CVE-2017-5982Directory traversal vulnerability in the Chorus2 2.4.2 add-o…
• CVE-2017-5983The JIRA Workflow Designer Plugin in Atlassian JIRA Server b…
• CVE-2017-5984In libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking…
• CVE-2017-5986Race condition in the sctp_wait_for_sndbuf function in net/s…
• CVE-2017-5987The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci…5.5
• CVE-2017-5988NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or S…
• CVE-2017-5990An issue was discovered in PhreeBooksERP before 2017-02-13. …
• CVE-2017-5991An issue was discovered in Artifex MuPDF before 1912de5f08e9…7.5
• CVE-2017-5992Openpyxl 2.4.1 resolves external entities by default, which …