github.com/lxc/incus/v7/cmd/incusd vulnerabilities (Go)
10 vulnerabilities.
-
github.com/lxc/incus/v7/cmd/incusdGo Incus has a project restriction bypass in instance copy across projects 7.7 High -
github.com/lxc/incus/v7/cmd/incusdGo Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
github.com/lxc/incus/v7/cmd/incusdGo Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
github.com/lxc/incus/v7/cmd/incusdGo Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
github.com/lxc/incus/v7/cmd/incusdGo Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical