Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-z74k-px1a-wqa6
Summarylxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls.
Aliases
0
alias CVE-2016-8649
Fixed_packages
0
url pkg:deb/debian/lxc@1:2.0.6-1?distro=trixie
purl pkg:deb/debian/lxc@1:2.0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:2.0.6-1%3Fdistro=trixie
1
url pkg:deb/debian/lxc@1:2.0.7-2~bpo8%2B1
purl pkg:deb/debian/lxc@1:2.0.7-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-7juj-78y7-g7b6
2
vulnerability VCID-xq22-fmtf-8yhs
3
vulnerability VCID-xx5x-hgur-xbbj
4
vulnerability VCID-xz1y-a2ay-quc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:2.0.7-2~bpo8%252B1
2
url pkg:deb/debian/lxc@1:4.0.6-2%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/lxc@1:4.0.6-2%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:4.0.6-2%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/lxc@1:5.0.2-1%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/lxc@1:5.0.2-1%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:5.0.2-1%252Bdeb12u3%3Fdistro=trixie
4
url pkg:deb/debian/lxc@1:6.0.4-4%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/lxc@1:6.0.4-4%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:6.0.4-4%252Bdeb13u2%3Fdistro=trixie
5
url pkg:deb/debian/lxc@1:6.0.6-1?distro=trixie
purl pkg:deb/debian/lxc@1:6.0.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:6.0.6-1%3Fdistro=trixie
6
url pkg:deb/debian/lxc@1:6.0.6-2?distro=trixie
purl pkg:deb/debian/lxc@1:6.0.6-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:6.0.6-2%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/lxc@0.7.2-1
purl pkg:deb/debian/lxc@0.7.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-hdgf-23he-vkb6
6
vulnerability VCID-mac4-jq4n-c3hm
7
vulnerability VCID-xq22-fmtf-8yhs
8
vulnerability VCID-xx5x-hgur-xbbj
9
vulnerability VCID-xz1y-a2ay-quc1
10
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@0.7.2-1
1
url pkg:deb/debian/lxc@0.7.2-1%2Bdeb6u1
purl pkg:deb/debian/lxc@0.7.2-1%2Bdeb6u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-hdgf-23he-vkb6
6
vulnerability VCID-mac4-jq4n-c3hm
7
vulnerability VCID-xq22-fmtf-8yhs
8
vulnerability VCID-xx5x-hgur-xbbj
9
vulnerability VCID-xz1y-a2ay-quc1
10
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@0.7.2-1%252Bdeb6u1
2
url pkg:deb/debian/lxc@0.8.0~rc1-8%2Bdeb7u2
purl pkg:deb/debian/lxc@0.8.0~rc1-8%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-hdgf-23he-vkb6
6
vulnerability VCID-mac4-jq4n-c3hm
7
vulnerability VCID-xq22-fmtf-8yhs
8
vulnerability VCID-xx5x-hgur-xbbj
9
vulnerability VCID-xz1y-a2ay-quc1
10
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@0.8.0~rc1-8%252Bdeb7u2
3
url pkg:deb/debian/lxc@1:1.0.6-6
purl pkg:deb/debian/lxc@1:1.0.6-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-mac4-jq4n-c3hm
6
vulnerability VCID-xq22-fmtf-8yhs
7
vulnerability VCID-xx5x-hgur-xbbj
8
vulnerability VCID-xz1y-a2ay-quc1
9
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:1.0.6-6
4
url pkg:deb/debian/lxc@1:1.0.6-6%2Bdeb8u2~bpo70%2B1
purl pkg:deb/debian/lxc@1:1.0.6-6%2Bdeb8u2~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-mac4-jq4n-c3hm
6
vulnerability VCID-xq22-fmtf-8yhs
7
vulnerability VCID-xx5x-hgur-xbbj
8
vulnerability VCID-xz1y-a2ay-quc1
9
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:1.0.6-6%252Bdeb8u2~bpo70%252B1
5
url pkg:deb/debian/lxc@1:1.0.6-6%2Bdeb8u6
purl pkg:deb/debian/lxc@1:1.0.6-6%2Bdeb8u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rds-zc87-auf6
1
vulnerability VCID-2esq-3t19-akam
2
vulnerability VCID-7juj-78y7-g7b6
3
vulnerability VCID-7qzu-162d-7ug4
4
vulnerability VCID-brf5-pqx1-13bu
5
vulnerability VCID-mac4-jq4n-c3hm
6
vulnerability VCID-xq22-fmtf-8yhs
7
vulnerability VCID-xx5x-hgur-xbbj
8
vulnerability VCID-xz1y-a2ay-quc1
9
vulnerability VCID-z74k-px1a-wqa6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/lxc@1:1.0.6-6%252Bdeb8u6
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8649
reference_id
reference_type
scores
0
value 0.02154
scoring_system epss
scoring_elements 0.84309
published_at 2026-04-24T12:55:00Z
1
value 0.02154
scoring_system epss
scoring_elements 0.84281
published_at 2026-04-18T12:55:00Z
2
value 0.02154
scoring_system epss
scoring_elements 0.84284
published_at 2026-04-21T12:55:00Z
3
value 0.02154
scoring_system epss
scoring_elements 0.84188
published_at 2026-04-01T12:55:00Z
4
value 0.02154
scoring_system epss
scoring_elements 0.84201
published_at 2026-04-02T12:55:00Z
5
value 0.02154
scoring_system epss
scoring_elements 0.84219
published_at 2026-04-04T12:55:00Z
6
value 0.02154
scoring_system epss
scoring_elements 0.8422
published_at 2026-04-07T12:55:00Z
7
value 0.02154
scoring_system epss
scoring_elements 0.84242
published_at 2026-04-08T12:55:00Z
8
value 0.02154
scoring_system epss
scoring_elements 0.84249
published_at 2026-04-09T12:55:00Z
9
value 0.02154
scoring_system epss
scoring_elements 0.84266
published_at 2026-04-11T12:55:00Z
10
value 0.02154
scoring_system epss
scoring_elements 0.84261
published_at 2026-04-12T12:55:00Z
11
value 0.02154
scoring_system epss
scoring_elements 0.84258
published_at 2026-04-13T12:55:00Z
12
value 0.02154
scoring_system epss
scoring_elements 0.84279
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8649
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465
reference_id
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465
2
reference_url https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345
reference_id
reference_type
scores
url https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1398242
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1398242
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8649
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8649
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c
reference_id
reference_type
scores
url https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c
7
reference_url https://security-tracker.debian.org/tracker/CVE-2016-8649
reference_id
reference_type
scores
url https://security-tracker.debian.org/tracker/CVE-2016-8649
8
reference_url http://www.securityfocus.com/bid/94498
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/94498
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:linuxcontainers:lxc:*:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-8649
reference_id CVE-2016-8649
reference_type
scores
0
value 9.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:C/I:C/A:C
1
value 9.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2016-8649
11
reference_url https://usn.ubuntu.com/3136-1/
reference_id USN-3136-1
reference_type
scores
url https://usn.ubuntu.com/3136-1/
Weaknesses
0
cwe_id 264
name Permissions, Privileges, and Access Controls
description Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Exploits
Severity_range_score6.0 - 9.1
Exploitability0.5
Weighted_severity8.2
Risk_score4.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-z74k-px1a-wqa6