lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1335