incus vulnerabilities (Debian)
68 vulnerabilities.
incusDebianAbitrary file write through systemd-creds option10.0 CriticalincusDebianLocal Incus UI web server vulnerable to nuthentication bypass8.8 HighincusDebianIncus vulnerable to arbitrary file read and write through pongo templates10.0 CriticalincusDebianIncus vulnerable to denial of source through crafted bucket backup file6.5 MediumincusDebianIncus vulnerable to local privilege escalation through VM screenshot path4.7 MediumincusDebianIncus does not verify combined fingerprint when downloading images from simplestreams servers5.7 MediumincusDebianAuthenticated RCE via unsanitized compression_algorithm9.4 CriticalincusDebianIncus container image templating arbitrary host file read and write8.7 HighincusDebianIncus container environment configuration newline injection8.7 HighincusDebianIncus vulnerable to local privilege escalation through custom storage volumes8.6 HighincusDebianPath Traversal in LXD Instance Log File Retrieval7.1 HighincusDebianProject existence disclosure in LXD images API6.9 MediumincusDebianProject Existence Disclosure via Error Handling in LXD Image Export6.9 MediumincusDebianPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations API7.4 HighincusDebianSource Container Identification Vulnerability via cmdline Spoofing in devLXD Server5.1 MediumincusDebianArbitrary File Read via Template Injection in Snapshot Patterns7.1 HighincusDebianCSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI7.5 HighincusDebianlxd CA certificate sign check bypass3.8 Low