CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which…

published September 28, 2015

CVSS
—
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00502 · 42.1th percentile
Published
2015-09-28T20:00Z
EPSS history
Timeline
  • 28 SEP 20:00Z
    vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which…
    cvelistv5