CVE-2015-6927

CVE-2015-6927 describes a local privilege escalation vulnerability in OpenVZ vzctl versions prior to 4.9.4. A local root user within a simfs container could exploit a flaw in how vzctl identifies virtual environment layouts, specifically by manipulating the root.hdd file of a ploop container via a symlink attack. This could allow the attacker to change the root password of arbitrary ploop containers, potentially granting unauthorized access to a control panel. The vulnerability has a CVSS score of 3.6 (low severity), indicating a local attack vector with low complexity and partial impact on integrity and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.