fedoraproject fedora CVE-2016-3096 in Fedora Project and Red Hat Products
Published on June 3, 2016

product logo product logo
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2016-3096

stack.watch emails you whenever new vulnerabilities are published in Fedora Project Fedora or Red Hat Ansible. Just hit a watch button to start following.

Fedora Project Fedora
 
Red Hat Ansible
 

Exploit Probability

EPSS
0.04%
Percentile
10.84%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.