vulnerability

Ubuntu: (CVE-2017-18641): lxc-templates vulnerability

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Feb 10, 2020

Added

Jun 26, 2025

Modified

Jun 26, 2025

Description

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

no-fix-ubuntu-package

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.