{"vulnerability": "CVE-2015-1340", "sightings": [{"uuid": "8f5f6ed8-2521-43ca-9cf3-633ade1d6c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1340", "type": "seen", "source": "https://t.me/cibsecurity/3996", "content": "ATENTION\u203c New - CVE-2015-1340 (lxd)\n\nLXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-04-29T18:27:22.000000Z"}, {"uuid": "9b717f2c-7d59-44be-8548-7ad2ad3970e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-1340", "type": "seen", "source": "https://t.me/cibsecurity/3856", "content": "ATENTION\u203c New - CVE-2015-1340\n\nLXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-04-22T20:30:42.000000Z"}]}