399 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-47952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree,...
GO-2025-3782 Incus creates nftables rules that partially bypass security options in github.com/lxc/incus
Incus creates nftables rules that partially bypass security options in github.com/lxc/incus...
USN-7117-3 needrestart regression
USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem for LXC containers. We apologize for the inconvenience. Original advisory details: Qualys discovered that needrestart passed unsanitized data to a library...
USN-7117-3: needrestart regression
USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem for LXC containers. We apologize for the inconvenience. Original advisory details: Qualys discovered that needrestart passed unsanitized data to a library...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : needrestart regression (USN-7117-3)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7117-3 advisory. USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This...
openSUSE Security Advisory (openSUSE-SU-2024:0342-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : lxc (openSUSE-SU-2024:0342-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0342-1 advisory. lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported...
OPENSUSE-SU-2024:0342-1 Security update for lxc
This update for lxc fixes the following issues: lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. Some of the...
Security update for lxc (moderate)
openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2024:0342-1 Rating: moderate References: 1204842 1206779 Cross-References: CVE-2022-47952 CVSS scores: CVE-2022-47952 SUSE: 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports...
ROS-20240625-02
A vulnerability in the lxc-user-nic component of the LXC virtualization system is related to information disclosure via a inconsistency. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to the protected information...
CVE-2021-33634
iSulad uses the lcr+lxc runtime default to run malicious images, which can cause DOS...
CVE-2021-33634
iSulad uses the lcr+lxc runtime default to run malicious images, which can cause DOS...
Default credentials
iSulad uses the lcr+lxc runtime default to run malicious images, which can cause DOS...
CVE-2021-33634
CVE-2021-33634 affects Huawei EulerOS packages using iSulad with the default lcr+lxc runtime. The advisory documents describe that running malicious images can lead to a denial-of-service (DoS) condition. CVSS data indicates medium severity (base 5.5–6.3 depending on source), with local access re...
CVE-2021-33634 Malicious image running containers may cause DoS attacks
iSulad uses the lcr+lxc runtime default to run malicious images, which can cause DOS...
PT-2023-12214 · Isulad · Isulad
Name of the Vulnerable Software and Affected Versions: iSulad affected versions not specified Description: The issue is related to iSulad using the lcr+lxc runtime by default to run malicious images, which can cause a Denial of Service DOS. Recommendations: At the moment, there is no information...
openEuler Security Vulnerability
openEuler is an operating system from the Open Atomics Open Source Foundation. A security vulnerability exists in openEuler that stems from running a malicious image when iSulad lcr+lxc is run by default, which could lead to a denial of service...
[SECURITY] [DLA 3533-1] lxc security update
Debian LTS Advisory DLA-3533-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón August 17, 2023 https://wiki.debian.org/LTS Package : lxc Version : 1:3.1.0+really3.0.3-8+deb10u1 CVE ID : CVE-2022-47952 LXC is a Linux Containers userspace tool set. Maher Azzou...
Debian: Security Advisory (DLA-3533-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...