CVE catalog

CVE-2017-5985

lxc: CVE-2017-5985

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 25, 2026

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlxcsid1:7.0.0-2fixed
Debianlxcforky1:7.0.0-2fixed
Debianlxctrixie1:6.0.4-4+deb13u4fixed
Debianlxcbookworm1:5.0.2-1+deb12u4fixed
Ubuntulxc14.041.0.0~alpha1-0ubuntu11vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu4vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu5vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu6vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu4vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu5vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu6vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu7vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu8vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~beta2-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta2-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~beta3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta4-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta4-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~rc1-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~rc3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~rc4-0ubuntu1vulnerable
Ubuntulxc14.041.0.0-0ubuntu1vulnerable
Ubuntulxc14.041.0.0-0ubuntu2vulnerable
Ubuntulxc14.041.0.0-0ubuntu3vulnerable
Ubuntulxc14.041.0.0-0ubuntu4vulnerable
Ubuntulxc14.041.0.1-0ubuntu1vulnerable
Ubuntulxc14.041.0.2-0ubuntu1vulnerable
Ubuntulxc14.041.0.2-0ubuntu2vulnerable
Ubuntulxc14.041.0.3-0ubuntu1vulnerable
Ubuntulxc14.041.0.3-0ubuntu2vulnerable
Ubuntulxc14.041.0.3-0ubuntu3vulnerable
Ubuntulxc14.041.0.4-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.5-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.6-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.2vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.5vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.6vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.7vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.9vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.10vulnerable
Ubuntulxc14.041.0.8-0ubuntu0.3vulnerable
Ubuntulxc14.041.0.8-0ubuntu0.4vulnerable
Ubuntulxc14.041.0.9-0ubuntu2vulnerable
Ubuntulxc14.041.0.9-0ubuntu3fixed
Ubuntulxc16.041.1.4-0ubuntu1vulnerable
Ubuntulxc16.041.1.4-0ubuntu1.1vulnerable
Ubuntulxc16.041.1.4-0ubuntu3vulnerable
Ubuntulxc16.041.1.5-0ubuntu1vulnerable
Ubuntulxc16.041.1.5-0ubuntu2vulnerable
Ubuntulxc16.041.1.5-0ubuntu3vulnerable
Ubuntulxc16.041.1.5-0ubuntu4vulnerable
Ubuntulxc16.041.1.5-0ubuntu5vulnerable
Ubuntulxc16.041.1.5-0ubuntu6vulnerable
Ubuntulxc16.042.0.0~beta2-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc1-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc2-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu3vulnerable
Ubuntulxc16.042.0.0~rc4-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc5-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc9-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc10-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc10-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc11-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc12-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc13-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc14-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc15-0ubuntu1vulnerable
Ubuntulxc16.042.0.0-0ubuntu1vulnerable
Ubuntulxc16.042.0.0-0ubuntu2vulnerable
Ubuntulxc16.042.0.1-0ubuntu1~16.04.1vulnerable
Ubuntulxc16.042.0.3-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.4-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.3vulnerable
Ubuntulxc16.042.0.6-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.6-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.7-0ubuntu1~16.04.1vulnerable
Ubuntulxc16.042.0.7-0ubuntu1~16.04.2fixed
Ubuntulxc14.041.0.0~alpha1-0ubuntu11vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu4vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu5vulnerable
Ubuntulxc14.041.0.0~alpha2-0ubuntu6vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu4vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu5vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu6vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu7vulnerable
Ubuntulxc14.041.0.0~alpha3-0ubuntu8vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~beta1-0ubuntu3vulnerable
Ubuntulxc14.041.0.0~beta2-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta2-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~beta3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta4-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~beta4-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~rc1-0ubuntu2vulnerable
Ubuntulxc14.041.0.0~rc3-0ubuntu1vulnerable
Ubuntulxc14.041.0.0~rc4-0ubuntu1vulnerable
Ubuntulxc14.041.0.0-0ubuntu1vulnerable
Ubuntulxc14.041.0.0-0ubuntu2vulnerable
Ubuntulxc14.041.0.0-0ubuntu3vulnerable
Ubuntulxc14.041.0.0-0ubuntu4vulnerable
Ubuntulxc14.041.0.1-0ubuntu1vulnerable
Ubuntulxc14.041.0.2-0ubuntu1vulnerable
Ubuntulxc14.041.0.2-0ubuntu2vulnerable
Ubuntulxc14.041.0.3-0ubuntu1vulnerable
Ubuntulxc14.041.0.3-0ubuntu2vulnerable
Ubuntulxc14.041.0.3-0ubuntu3vulnerable
Ubuntulxc14.041.0.4-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.5-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.6-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.1vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.2vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.5vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.6vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.7vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.9vulnerable
Ubuntulxc14.041.0.7-0ubuntu0.10vulnerable
Ubuntulxc14.041.0.8-0ubuntu0.3vulnerable
Ubuntulxc14.041.0.8-0ubuntu0.4vulnerable
Ubuntulxc14.041.0.9-0ubuntu2vulnerable
Ubuntulxc14.041.0.9-0ubuntu3fixed
Ubuntulxc16.041.1.4-0ubuntu1vulnerable
Ubuntulxc16.041.1.4-0ubuntu1.1vulnerable
Ubuntulxc16.041.1.4-0ubuntu3vulnerable
Ubuntulxc16.041.1.5-0ubuntu1vulnerable
Ubuntulxc16.041.1.5-0ubuntu2vulnerable
Ubuntulxc16.041.1.5-0ubuntu3vulnerable
Ubuntulxc16.041.1.5-0ubuntu4vulnerable
Ubuntulxc16.041.1.5-0ubuntu5vulnerable
Ubuntulxc16.041.1.5-0ubuntu6vulnerable
Ubuntulxc16.042.0.0~beta2-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc1-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc2-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc3-0ubuntu3vulnerable
Ubuntulxc16.042.0.0~rc4-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc5-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc9-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc10-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc10-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc11-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc12-0ubuntu1vulnerable
Ubuntulxc16.042.0.0~rc13-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc14-0ubuntu2vulnerable
Ubuntulxc16.042.0.0~rc15-0ubuntu1vulnerable
Ubuntulxc16.042.0.0-0ubuntu1vulnerable
Ubuntulxc16.042.0.0-0ubuntu2vulnerable
Ubuntulxc16.042.0.1-0ubuntu1~16.04.1vulnerable
Ubuntulxc16.042.0.3-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.4-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.5-0ubuntu1~ubuntu16.04.3vulnerable
Ubuntulxc16.042.0.6-0ubuntu1~ubuntu16.04.1vulnerable
Ubuntulxc16.042.0.6-0ubuntu1~ubuntu16.04.2vulnerable
Ubuntulxc16.042.0.7-0ubuntu1~16.04.1vulnerable
Ubuntulxc16.042.0.7-0ubuntu1~16.04.2fixed
Opensuselxctumbleweed4.0.9-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlxcsourcesid1:2.0.7-2not yet assignedNot reported[857295]
Debianlxcsourceforky1:2.0.7-2not yet assignedNot reported[857295]
Debianlxcsourcetrixie1:2.0.7-2not yet assignedNot reported[857295]
Debianlxcsourcebookworm1:2.0.7-2not yet assignedNot reported[857295]
Ubuntulxcdeb14.041.0.9-0ubuntu3Not reportedUBUNTU-CVE-2017-5985Not reported
Ubuntulxcdeb16.042.0.7-0ubuntu1~16.04.2Not reportedUBUNTU-CVE-2017-5985Not reported
Ubuntulxcdeb14.041.0.9-0ubuntu3Not reportedUSN-3224-1Not reported
Ubuntulxcdeb16.042.0.7-0ubuntu1~16.04.2Not reportedUSN-3224-1Not reported
Opensuselxcrpmtumbleweed4.0.9-1.1Not reportedOPENSUSE-SU-2024:11030-1Not reported

[Debian bug #857295]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [liblxc1]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [liblxc-devel]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [lxc-bash-completion]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · noarch · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [lxc-ja-doc]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · noarch · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [lxc-ko-doc]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · noarch · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [pam_cgfs]Unknown

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 4.0.9-1.1

      Version impact unknown

      dsa · lxc · opensuse · tumbleweed

  • [lxc]Fixed

    Source package: [lxc]

    Details (1)

    • 7.0.0-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 4.0.9-1.1

      dsa · lxc · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [liblxc1]Fixed

    Source package: [lxc]

    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

  • [liblxc-common]Fixed

    Source package: [lxc]

    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

  • [libpam-cgfs]Fixed

    Source package: [lxc]

    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

  • [lxc]Fixed
    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

  • [lxc-dev]Fixed

    Source package: [lxc]

    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

  • [lxc-tests]Fixed

    Source package: [lxc]

    Details (2)

    • 1:5.0.2-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

    • 1:5.0.2-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · bookworm; dsa · lxc · debian · 12

[Debian 13 (Trixie)]

  • [liblxc1t64]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

  • [liblxc-common]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

  • [libpam-cgfs]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

  • [lxc]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

  • [lxc-dev]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

  • [lxc-tests]Fixed

    Source package: [lxc]

    Details (2)

    • 1:6.0.4-4+deb13u3+b1 · amd64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

    • 1:6.0.4-4+deb13u3+b1 · arm64 · trixie

      Fixed · Fixed: 1:2.0.7-2

      dsa · lxc · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]