lxd vulnerabilities (Ubuntu)
81 vulnerabilities.
-
lxdUbuntu Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net 6.1 Medium -
lxdUbuntu Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net 7.5 High -
lxdUbuntu HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
lxdUbuntu Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
lxdUbuntu Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
lxdUbuntu HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
lxdUbuntu HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
lxdUbuntu LXD client recursive file pull allows directory escape via malicious VM agent 5.8 Medium -
lxdUbuntu Arbitrary file write on LXD host via symlink in migration stream 9.9 Critical -
lxdUbuntu Incorrect authorization in LXD storage volume API allows reading volumes from other projects 7.7 High -
lxdUbuntu Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root 9.6 Critical -
lxdUbuntu Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD 9.9 Critical -
lxdUbuntu LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse 6.3 Medium -
lxdUbuntu CLI Path Traversal via Content-Disposition in LXD Image Export/Copy 4.2 Medium -
lxdUbuntu Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
lxdUbuntu Instance template path traversal allows arbitrary host file write as root 9.9 Critical -
lxdUbuntu Incus has a project restriction bypass in instance copy across projects 7.7 High -
lxdUbuntu Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
lxdUbuntu Arbitrary file read+write on host via templates/ symlink in malicious image 8.5 High -
lxdUbuntu Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE 9.9 Critical -
lxdUbuntu Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 9.9 Critical -
lxdUbuntu Root RCE via image backup.yaml symlink 9.9 Critical -
lxdUbuntu Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 4.3 Medium -
lxdUbuntu Project restriction bypass via instance migration config override 9.9 Critical -
lxdUbuntu Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 9.9 Critical -
lxdUbuntu LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration 8.7 High -
lxdUbuntu Storage volume cross-project move and snapshot restore bypass project disk limits 8.5 High -
lxdUbuntu Cross-project cluster migration bypasses project restrictions via cluster notification flag 9.9 Critical -
lxdUbuntu Cross-project instance move bypasses all project restrictions allowing host command execution 9.9 Critical -
lxdUbuntu Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
lxdUbuntu Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
lxdUbuntu Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
lxdUbuntu Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
lxdUbuntu Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
lxdUbuntu Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
lxdUbuntu Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
lxdUbuntu Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
lxdUbuntu Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
lxdUbuntu Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
lxdUbuntu Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
lxdUbuntu Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
lxdUbuntu Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
lxdUbuntu Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
lxdUbuntu Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
lxdUbuntu Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
lxdUbuntu Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
lxdUbuntu Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
lxdUbuntu Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
lxdUbuntu Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net 7.5 High -
lxdUbuntu Incus: Unbounded binary import disk exhaustion 4.3 Medium - Show olderLoading…