CVE-2013-6441
lxc: sshd template allow privilege escalation on host
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · December 16, 2013
Updated · January 8, 2026
Description
The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file.
Statement
This issue did not affect the versions of libvirt (which includes lxc) as shipped with Red Hat Enterprise Linux 6 as they do not include the template file lxc-sshd.in.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 6AV:N/AC:M/Au:S/C:P/I:P/A:P
CWE not specified