github.com/lxc/incus vulnerabilities (Go)
32 vulnerabilities.
-
github.com/lxc/incusGo Incus has a project restriction bypass in instance copy across projects 7.7 High -
github.com/lxc/incusGo Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
github.com/lxc/incusGo Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
github.com/lxc/incusGo Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
github.com/lxc/incusGo Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
github.com/lxc/incusGo Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
github.com/lxc/incusGo Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
github.com/lxc/incusGo Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
github.com/lxc/incusGo Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
github.com/lxc/incusGo Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
github.com/lxc/incusGo Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
github.com/lxc/incusGo Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 4.4 Medium -
github.com/lxc/incusGo Incus: Unbounded binary import disk exhaustion 4.3 Medium -
github.com/lxc/incusGo Incus: Nil Dereferences on Restore via Malformed YAML 6.5 Medium -
github.com/lxc/incusGo Incus: Unbounded YAML Metadata Decode via Parsing 5.3 Medium -
github.com/lxc/incusGo Incus: Nil-Pointer Dereference via S3 Bucket Import 6.5 Medium -
github.com/lxc/incusGo Incus out-of-bounds panic in snapshot metadata handling allows denial of service 7.1 High -
github.com/lxc/incusGo Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation 2.3 Low -
github.com/lxc/incusGo Incus nil-pointer dereference in custom volume import allows denial of service 7.1 High -
github.com/lxc/incusGo Incus nil-pointer dereference in storage bucket import allows denial of service 7.1 High -
github.com/lxc/incusGo Incus blind SSRF via image import preflight HEAD request 5.3 Medium -
github.com/lxc/incusGo Abitrary file write through systemd-creds option 10.0 Critical -
github.com/lxc/incusGo Local Incus UI web server vulnerable to nuthentication bypass 8.8 High -
github.com/lxc/incusGo Incus vulnerable to arbitrary file read and write through pongo templates 10.0 Critical -
github.com/lxc/incusGo Incus vulnerable to denial of source through crafted bucket backup file 6.5 Medium -
github.com/lxc/incusGo Incus vulnerable to local privilege escalation through VM screenshot path 4.7 Medium -
github.com/lxc/incusGo Incus does not verify combined fingerprint when downloading images from simplestreams servers 5.7 Medium -
github.com/lxc/incusGo Incus container image templating arbitrary host file read and write 8.7 High -
github.com/lxc/incusGo Incus container environment configuration newline injection 8.7 High -
github.com/lxc/incusGo Incus vulnerable to local privilege escalation through custom storage volumes 8.6 High -
github.com/lxc/incusGo Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs 8.1 High -
github.com/lxc/incusGo Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs 3.4 Low