lxd vulnerabilities (openSUSE)
9 vulnerabilities.
-
lxdopenSUSE Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE 9.9 Critical -
lxdopenSUSE Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 9.9 Critical -
lxdopenSUSE Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 4.3 Medium -
lxdopenSUSE Project restriction bypass via instance migration config override 9.9 Critical -
lxdopenSUSE Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 9.9 Critical -
lxdopenSUSE LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration 8.7 High -
lxdopenSUSE Storage volume cross-project move and snapshot restore bypass project disk limits 8.5 High -
lxdopenSUSE Cross-project cluster migration bypasses project restrictions via cluster notification flag 9.9 Critical -
lxdopenSUSE Buffer Overflow vulnerability in osrg gobgp 7.5 High