CVE-2016-1582

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-15837.8The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cauCVE-2016-15845.3In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.CVE-2016-15859.8In all versions of AppArmor mount rules are accidentally widened when compiled.CVE-2016-15867.5A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versiCVE-2016-15877.5The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of theCVE-2016-15926.1XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.dCVE-2016-15937.2Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated admiCVE-2016-15946.5Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa UCVE-2016-15956.5LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated usCVE-2016-15965.4Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to injectCVE-2016-15978.8A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.CVE-2016-15985.4XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into th
CVE-2016-1582: Medium severity, CVSS 5.5 | Vulnix