cve/2018/CVE-2018-6556.md

### [CVE-2018-6556](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6556)
![](https://img.shields.io/static/v1?label=Product&message=LXC&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.02.0.9%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Incorrect%20access%20control&color=brighgreen)

### Description

lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/MaherAzzouzi/CVE-2022-47952
- https://github.com/k0mi-tg/CVE-POC
- https://github.com/manas3c/CVE-POC
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/whoforget/CVE-POC
- https://github.com/youwizard/CVE-POC