container management system Block Create Options Command Execution

The vulnerability in the block.createoptions mechanism of the container management system and the Incus virtual machine manager is related to argument injection or modification. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands...

container management system bypass security restrictions

The vulnerability in the cmd/incusd/instancespost.go file of the container management system and the Incus virtual machine manager is related to authorization flaws. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions...

Container management system validation mechanism Command Execution

The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager relates to insufficient checking of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

client OVN in the

The vulnerability of the client OVN in the container management system and the Incus virtual machine manager is related to errors in the TLS certificate validation process. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

tr.Next() Container DoS

The vulnerability of the tr.Next method in container management systems and the Incus virtual machine manager is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

server daemon incusd in DoS

The vulnerability of the server daemon incus in the container management system and the Incus Virtual Machine Manager is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

container management system getImageMetadata backup.GetInfo DoS

The vulnerabilities of the getImageMetadata and backup.GetInfo functions in the container management system and the virtual machine manager Incus are related to unlimited resource distribution. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...

LXD Container Privilege Escalation

The vulnerability of the isVMLowLevelOptionForbidden function in the LXD container management system is related to the use of an incomplete blacklist when processing input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Incus Path Traversal Unauthorized Access

The vulnerability of the container management system and the virtual machine manager Incus is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Incus Unlimited Resource Distribution DoS

The vulnerability of the container management system and the virtual machine manager Incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Container management system CRLF Command Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Incus Privilege Escalation

The vulnerability of the container management system and the Incus virtual machine manager is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

Unspecified vulnerability in kubernetes

Kubernetes is an open source Docker container cluster management system from the Linux Foundation. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. There is a security vulnerability in kubernetes that can ...