lxd vulnerabilities (Ubuntu)
81 vulnerabilities.
lxdUbuntuIncus: Nil Dereferences on Restore via Malformed YAML6.5 MediumlxdUbuntuIncus: Unbounded YAML Metadata Decode via Parsing5.3 MediumlxdUbuntuIncus out-of-bounds panic in snapshot metadata handling allows denial of service7.1 HighlxdUbuntuIncus nil-pointer dereference in custom volume import allows denial of service7.1 HighlxdUbuntuIncus vulnerable to arbitrary file read and write through pongo templates10.0 CriticallxdUbuntuIncus does not verify combined fingerprint when downloading images from simplestreams servers5.7 MediumlxdUbuntuAuthorization Bypass in LXD GET /1.0/certificates Endpoint2.1 LowlxdUbuntuIncus container image templating arbitrary host file read and write8.7 HighlxdUbuntuIncus container environment configuration newline injection8.7 HighlxdUbuntuUnbounded memory consumption in golang.org/x/crypto/ssh5.3 MediumlxdUbuntuMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent5.3 MediumlxdUbuntuPotential denial of service in golang.org/x/crypto/ssh/agent7.5 HighlxdUbuntuInfinite parsing loop in golang.org/x/net5.3 MediumlxdUbuntuQuadratic parsing complexity in golang.org/x/net/html5.3 MediumlxdUbuntuPath Traversal in LXD Instance Log File Retrieval7.1 HighlxdUbuntuPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations API7.4 HighlxdUbuntuSource Container Identification Vulnerability via cmdline Spoofing in devLXD Server5.1 MediumlxdUbuntuIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 MediumlxdUbuntuUsage of IPv6 zone IDs can bypass URI name constraints in crypto/x5096.1 MediumlxdUbuntuMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 CriticallxdUbuntulxd has a restricted TLS certificate privilege escalation when in PKI mode3.8 LowlxdUbuntulxd CA certificate sign check bypass3.8 LowlxdUbuntuPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumlxdUbuntuImproper rendering of text nodes in golang.org/x/net/html6.1 MediumlxdUbuntuDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 HighlxdUbuntugolang.org/x/net/http2 Denial of Service vulnerability7.5 HighlxdUbuntuCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 CriticallxdUbuntugolang.org/x/net/html Infinite Loop vulnerability7.5 HighlxdUbuntuInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 CriticallxdUbuntulxd vulnerabilities5.5 MediumlxdUbuntulxd vulnerabilities5.5 Medium