fedoraproject fedora CVE-2016-3096 in Fedora Project and Red Hat Products
Published on June 3, 2016

product logo product logo
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x before 2.0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /opt/.lxc-attach-script, (2) the archived container in the archive_path directory, or the (3) lxc-attach-script.log or (4) lxc-attach-script.err files in the temporary directory.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2016-3096

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-3096 are published in these products:

Fedora Project Fedora
 
Red Hat Ansible
 

Exploit Probability

EPSS
0.08%
Percentile
22.91%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.