incus vulnerabilities (Ubuntu)
61 vulnerabilities.
-
incusUbuntu Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull 6.9 Medium -
incusUbuntu Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream 9.4 Critical -
incusUbuntu Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy 8.3 High -
incusUbuntu Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes 9.4 Critical -
incusUbuntu Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs 7.1 High -
incusUbuntu Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid} 7.0 High -
incusUbuntu Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options 9.0 Critical -
incusUbuntu LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints 7.1 High -
incusUbuntu Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh 5.3 Medium -
incusUbuntu Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root 9.6 Critical -
incusUbuntu Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD 9.9 Critical -
incusUbuntu [GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets] No score -
incusUbuntu [GHSA-7fj9-65v4-rp7h: Arbitrary file write on host via image-planted symlinks and oci.dns.* newline injection] No score -
incusUbuntu incus-7.4-1.1 on GA media No score -
incusUbuntu incus-7.4-1.1 on GA media No score -
incusUbuntu security update No score -
incusUbuntu security update No score -
incusUbuntu security update No score -
incusUbuntu security update No score -
incusUbuntu security update No score -
incusUbuntu Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 9.9 Critical -
incusUbuntu Incus vulnerable to root RCE via image backup.yaml symlink 9.9 Critical -
incusUbuntu Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 9.9 Critical -
incusUbuntu Incus has a project restriction bypass via instance migration config override 9.9 Critical -
incusUbuntu Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution 9.9 Critical -
incusUbuntu Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 4.3 Medium -
incusUbuntu Incus has a project restriction bypass in instance copy across projects 7.7 High -
incusUbuntu Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
incusUbuntu Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
incusUbuntu Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
incusUbuntu Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
incusUbuntu Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
incusUbuntu Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
incusUbuntu Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
incusUbuntu Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
incusUbuntu Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
incusUbuntu Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
incusUbuntu Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 4.4 Medium -
incusUbuntu Incus: Unbounded binary import disk exhaustion 4.3 Medium -
incusUbuntu Incus: Nil Dereferences on Restore via Malformed YAML 6.5 Medium -
incusUbuntu Incus: Unbounded YAML Metadata Decode via Parsing 5.3 Medium -
incusUbuntu Incus: Nil-Pointer Dereference via S3 Bucket Import 6.5 Medium -
incusUbuntu Incus out-of-bounds panic in snapshot metadata handling allows denial of service 7.1 High -
incusUbuntu Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation 2.3 Low -
incusUbuntu Incus nil-pointer dereference in custom volume import allows denial of service 7.1 High -
incusUbuntu Incus nil-pointer dereference in storage bucket import allows denial of service 7.1 High -
incusUbuntu Incus blind SSRF via image import preflight HEAD request 5.3 Medium -
incusUbuntu Update of type field in restricted TLS certificate allows privilege escalation to cluster admin 9.1 Critical -
incusUbuntu Importing a crafted backup leads to project restriction bypass 9.1 Critical -
incusUbuntu VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf 9.1 Critical - Show olderLoading…