CVE ID:	CVE-2018-6556
Description:	lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a (read-only) open of special kernel files (ptmx, proc, sys). Affected releases are LXC: 2.0 versions above and including 2.0.9; 3.0 versions above and including 3.0.0, prior to 3.0.2.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2023.1600   1.3.6.1.4.1.25623.1.1.2.2023.1557   1.3.6.1.4.1.25623.1.0.852015   1.3.6.1.4.1.25623.1.1.2.2023.1785   1.3.6.1.4.1.25623.1.1.2.2023.1532   1.3.6.1.4.1.25623.1.1.2.2023.2159   1.3.6.1.4.1.25623.1.0.843606   1.3.6.1.4.1.25623.1.1.2.2023.1476   1.3.6.1.4.1.25623.1.1.2.2023.1763   1.3.6.1.4.1.25623.1.1.2.2023.1451
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-6556 https://security.gentoo.org/glsa/201808-02 SuSE Security Announcement: openSUSE-SU-2019:1227 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00074.html SuSE Security Announcement: openSUSE-SU-2019:1230 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00076.html SuSE Security Announcement: openSUSE-SU-2019:1275 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00091.html SuSE Security Announcement: openSUSE-SU-2019:1481 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00073.html https://usn.ubuntu.com/usn/usn-3730-1