Lucene search
K

6 matches found

UbuntuCve
UbuntuCve
added 2026/01/22 10:16 p.m.2 views

CVE-2026-23953

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional...

8.7CVSS6.1AI score0.00032EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/22 9:39 p.m.3 views

CVE-2026-23953

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional...

8.7CVSS6AI score0.00032EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/01/22 9:39 p.m.13 views

CVE-2026-23953

Incus CVE-2026-23953 affects versions 6.20.0 and earlier. A user able to launch a container with a crafted YAML can inject newlines via an environment variable, enabling additional lxc.conf items and potentially arbitrary command execution on the host. Exploitation requires modifying the payload ...

8.7CVSS6AI score0.00032EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/22 9:39 p.m.14 views

CVE-2026-23953 Incus container environment configuration newline injection

Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional...

8.7CVSS0.00032EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/01/22 8:21 p.m.7 views

Incus container environment configuration newline injection

Summary A user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional configuration items in the container’s lxc.conf due to the newline injection. This c...

8.7CVSS5.9AI score0.00032EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2026/01/22 8:21 p.m.2 views

GHSA-X6JC-PHWX-HP32 Incus container environment configuration newline injection

Summary A user with the ability to launch a container with a custom YAML configuration e.g a member of the ‘incus’ group can create an environment variable containing newlines, which can be used to add additional configuration items in the container’s lxc.conf due to the newline injection. This c...

8.7CVSS6AI score0.00032EPSS
Exploits1References6
Rows per page
Query Builder