incus vulnerabilities (openSUSE)
34 vulnerabilities.
-
incusopenSUSE Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root 9.6 Critical -
incusopenSUSE Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD 9.9 Critical -
incusopenSUSE incus-7.4-1.1 on GA media No score -
incusopenSUSE incus-7.4-1.1 on GA media No score -
incusopenSUSE Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 9.9 Critical -
incusopenSUSE Incus vulnerable to root RCE via image backup.yaml symlink 9.9 Critical -
incusopenSUSE Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 9.9 Critical -
incusopenSUSE Incus has a project restriction bypass via instance migration config override 9.9 Critical -
incusopenSUSE Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution 9.9 Critical -
incusopenSUSE Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 4.3 Medium -
incusopenSUSE Incus has a project restriction bypass in instance copy across projects 7.7 High -
incusopenSUSE Incus has a project restriction bypass for custom volume copy across projects 7.7 High -
incusopenSUSE Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical -
incusopenSUSE Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 2.1 Low -
incusopenSUSE Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical -
incusopenSUSE Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 2.1 Low -
incusopenSUSE Incus has an arbitrary file write via path traversal in S3 multipart upload 9.9 Critical -
incusopenSUSE Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical -
incusopenSUSE Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical -
incusopenSUSE Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical -
incusopenSUSE Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical -
incusopenSUSE Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 4.4 Medium -
incusopenSUSE lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion 4.3 Medium -
incusopenSUSE Abitrary file write through systemd-creds option 10.0 Critical -
incusopenSUSE Local Incus UI web server vulnerable to nuthentication bypass 8.8 High -
incusopenSUSE Incus vulnerable to arbitrary file read and write through pongo templates 10.0 Critical -
incusopenSUSE Incus vulnerable to denial of source through crafted bucket backup file 6.5 Medium -
incusopenSUSE Incus vulnerable to local privilege escalation through VM screenshot path 4.7 Medium -
incusopenSUSE Incus does not verify combined fingerprint when downloading images from simplestreams servers 5.7 Medium -
incusopenSUSE Incus container image templating arbitrary host file read and write 8.7 High -
incusopenSUSE Incus container environment configuration newline injection 8.7 High -
incusopenSUSE runc: LSM labels can be bypassed with malicious config using dummy procfs files 7.3 High -
incusopenSUSE Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs 8.1 High -
incusopenSUSE Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs 3.4 Low