Lucene search
K

7 matches found

OSV
OSV
added 2025/11/05 6:41 p.m.1 views

GO-2025-4001 Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd...

6.8CVSS6.9AI score0.00059EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-54288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any...

6.8CVSS5.5AI score0.00059EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/06 5:13 p.m.2 views

CVE-2025-54288

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

5.1CVSS6.5AI score0.00059EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/10/02 9:20 a.m.1 views

CVE-2025-54288 Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

5.1CVSS6.4AI score0.00059EPSS
Exploits1References1
CVE
CVE
added 2025/10/02 9:20 a.m.8 views

CVE-2025-54288

CVE-2025-54288 affects Canonical LXD devLXD server on Linux container platforms. The issue arises from a vulnerability in how the devLXD code identifies containers via process cmdline information, allowing attackers with root privileges inside one container to impersonate other containers and rea...

6.8CVSS6.4AI score0.00059EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/10/02 9:20 a.m.6 views

CVE-2025-54288 Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...

5.1CVSS0.00059EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/02 12:0 a.m.4 views

PT-2025-40331

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0 and above Description An information spoofing issue exists in the devLXD server component of Canonical LXD. Attackers with root privileges within a container can impersonate other containers and access their metadata...

8.8CVSS6.5AI score0.00119EPSS
Exploits7References37
Rows per page
Query Builder