The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubuntu_linux | Canonical | 15.10 (including) | 15.10 (including) |
| Lxd | Ubuntu | devel | * |
| Lxd | Ubuntu | vivid | * |
| Lxd | Ubuntu | wily | * |