CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2025/11/05 6:41 p.m.•6 views

GO-2025-4001 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd...

6.8CVSS6.9AI score0.00326EPSS

SaveExploits1References1

Github Security Blog•added 2025/10/02 9:20 p.m.•10 views

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Impact In LXD's devLXD server, the source container identification process uses process cmdline command line information, allowing attackers to impersonate other containers by spoofing process names. The core issue lies in the findContainerForPID function in lxd/apidevlxd.go. This function...

6.8CVSS7AI score0.00326EPSS

SaveExploits1References4Affected Software1

OSV•added 2025/10/02 9:20 p.m.•4 views

GHSA-7232-97C6-J525 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

5.1CVSS7AI score0.00326EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by