incus vulnerabilities (Alpine)
30 vulnerabilities.
-
incusAlpine Incus has a project restriction bypass in instance copy across projects 7.7 High -
incusAlpine Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
incusAlpine Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
incusAlpine Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
incusAlpine Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
incusAlpine Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
incusAlpine Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
incusAlpine Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
incusAlpine Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
incusAlpine Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
incusAlpine Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
incusAlpine Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 4.4 Medium -
incusAlpine Incus: Unbounded binary import disk exhaustion 4.3 Medium -
incusAlpine Incus: Nil Dereferences on Restore via Malformed YAML 6.5 Medium -
incusAlpine Incus: Unbounded YAML Metadata Decode via Parsing 5.3 Medium -
incusAlpine Incus: Nil-Pointer Dereference via S3 Bucket Import 6.5 Medium -
incusAlpine Incus out-of-bounds panic in snapshot metadata handling allows denial of service 7.1 High -
incusAlpine Incus nil-pointer dereference in custom volume import allows denial of service 7.1 High -
incusAlpine Incus nil-pointer dereference in storage bucket import allows denial of service 7.1 High -
incusAlpine Authenticated RCE via unsanitized compression_algorithm 9.4 Critical -
incusAlpine Incus container image templating arbitrary host file read and write 8.7 High -
incusAlpine Incus container environment configuration newline injection 8.7 High -
incusAlpine Incus vulnerable to local privilege escalation through custom storage volumes 8.6 High -
incusAlpine Path Traversal in LXD Instance Log File Retrieval 7.1 High -
incusAlpine Project existence disclosure in LXD images API 6.9 Medium -
incusAlpine Project Existence Disclosure via Error Handling in LXD Image Export 6.9 Medium -
incusAlpine Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API 7.4 High -
incusAlpine Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server 5.1 Medium -
incusAlpine Arbitrary File Read via Template Injection in Snapshot Patterns 7.1 High -
incusAlpine CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI 7.5 High