github.com/lxc/incus/v7 vulnerabilities (Go)
17 vulnerabilities.
-
github.com/lxc/incus/v7Go Incus has a project restriction bypass in instance copy across projects 7.7 High -
github.com/lxc/incus/v7Go Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
github.com/lxc/incus/v7Go Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
github.com/lxc/incus/v7Go Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
github.com/lxc/incus/v7Go Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
github.com/lxc/incus/v7Go Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
github.com/lxc/incus/v7Go Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
github.com/lxc/incus/v7Go Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
github.com/lxc/incus/v7Go Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
github.com/lxc/incus/v7Go Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
github.com/lxc/incus/v7Go Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
github.com/lxc/incus/v7Go Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 4.4 Medium -
github.com/lxc/incus/v7Go Incus out-of-bounds panic in snapshot metadata handling allows denial of service 7.1 High -
github.com/lxc/incus/v7Go Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation 2.3 Low -
github.com/lxc/incus/v7Go Incus nil-pointer dereference in custom volume import allows denial of service 7.1 High -
github.com/lxc/incus/v7Go Incus nil-pointer dereference in storage bucket import allows denial of service 7.1 High -
github.com/lxc/incus/v7Go Incus blind SSRF via image import preflight HEAD request 5.3 Medium