11 matches found
LXC Incus backlink vulnerability
Versions prior to LXC Incus 6.0.7, from 6.1.0 up to versions prior to 7.0.2, and from 7.1.0 up to versions prior to 7.5.0 are affected by a backlink vulnerability. This vulnerability arises because malicious attackers can write host files by inserting symbolic links within transport volumes...
CVE-2026-48753
creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:17+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-ccjc-4qc3-jxqc 2026-07-07 20:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3hxgxr2u24 2026-08-21 16:08:18+00:00| see...
CVE-2026-48754
creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:15+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-4xg6-52mh-fpw8...
CVE-2026-48755
creationtimestamp| type| source ---|---|--- 2026-06-26 20:35:12+00:00| published-proof-of-concept| https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4 2026-07-01 02:15:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpkh3n7jjr2b 2026-07-01 02:31:46+00:00...
GO-2026-5612 Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus
Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus...
GO-2026-5397 Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus
Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus...
GO-2026-5254 Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus
Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the io.Copy process that handles binary import requests. An attacker can exhaust disk space on the host system by continuously streaming large amounts of data to the affected...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the YAML metadata parsing process. An attacker can cause excessive memory consumption and potentially trigger an out-of-memory condition on the server by uploading a crafted image ...
GO-2026-4882 Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus
Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus...
