lxd vulnerabilities (Debian)
53 vulnerabilities.
-
lxdDebian Improper certificate validation in the HTTPS listener in LXD 10.0 Critical -
lxdDebian LXD client recursive file pull allows directory escape via malicious VM agent 5.8 Medium -
lxdDebian Arbitrary file write on LXD host via symlink in migration stream 9.9 Critical -
lxdDebian Incorrect authorization in LXD storage volume API allows reading volumes from other projects 7.7 High -
lxdDebian Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root 9.6 Critical -
lxdDebian Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD 9.9 Critical -
lxdDebian LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse 6.3 Medium -
lxdDebian CLI Path Traversal via Content-Disposition in LXD Image Export/Copy 4.2 Medium -
lxdDebian Instance template path traversal allows arbitrary host file write as root 9.9 Critical -
lxdDebian Incus has a project restriction bypass in instance copy across projects 7.7 High -
lxdDebian Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
lxdDebian Arbitrary file read+write on host via templates/ symlink in malicious image 8.5 High -
lxdDebian Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE 9.9 Critical -
lxdDebian Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 9.9 Critical -
lxdDebian Root RCE via image backup.yaml symlink 9.9 Critical -
lxdDebian Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 4.3 Medium -
lxdDebian Project restriction bypass via instance migration config override 9.9 Critical -
lxdDebian Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 9.9 Critical -
lxdDebian LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration 8.7 High -
lxdDebian Storage volume cross-project move and snapshot restore bypass project disk limits 8.5 High -
lxdDebian Cross-project cluster migration bypasses project restrictions via cluster notification flag 9.9 Critical -
lxdDebian Cross-project instance move bypasses all project restrictions allowing host command execution 9.9 Critical -
lxdDebian Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
lxdDebian Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
lxdDebian Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
lxdDebian Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
lxdDebian Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
lxdDebian Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
lxdDebian SSRF via image import from URL allows internal network probing by authenticated users 5.0 Medium -
lxdDebian LXD Snapshot Import Privilege Escalation Vulnerability 7.2 High -
lxdDebian Authenticated Denial of Service via Malicious Backup Tarball in LXD 6.5 Medium -
lxdDebian Incus: Unbounded binary import disk exhaustion 4.3 Medium -
lxdDebian Incus: Nil Dereferences on Restore via Malformed YAML 6.5 Medium -
lxdDebian Incus: Unbounded YAML Metadata Decode via Parsing 5.3 Medium -
lxdDebian Incus out-of-bounds panic in snapshot metadata handling allows denial of service 7.1 High -
lxdDebian Incus nil-pointer dereference in custom volume import allows denial of service 7.1 High -
lxdDebian Update of type field in restricted TLS certificate allows privilege escalation to cluster admin 9.1 Critical -
lxdDebian Importing a crafted backup leads to project restriction bypass 9.1 Critical -
lxdDebian VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf 9.1 Critical -
lxdDebian Incus vulnerable to arbitrary file read and write through pongo templates 10.0 Critical -
lxdDebian Incus does not verify combined fingerprint when downloading images from simplestreams servers 5.7 Medium -
lxdDebian Authenticated RCE via unsanitized compression_algorithm 9.4 Critical -
lxdDebian Incus container image templating arbitrary host file read and write 8.7 High -
lxdDebian Incus container environment configuration newline injection 8.7 High -
lxdDebian Incus vulnerable to local privilege escalation through custom storage volumes 8.6 High -
lxdDebian Path Traversal in LXD Instance Log File Retrieval 7.1 High -
lxdDebian Project existence disclosure in LXD images API 6.9 Medium -
lxdDebian Project Existence Disclosure via Error Handling in LXD Image Export 6.9 Medium -
lxdDebian Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API 7.4 High -
lxdDebian Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server 5.1 Medium - Show olderLoading…