Lucene search
+L

11 matches found

osv_cve
osv_cve
•added 2020/02/10 1:15 a.m.•24 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7AI score0.01518EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2020/02/10 1:15 a.m.•21 views

DEBIAN-CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1CVSS7.9AI score0.01518EPSS
SaveExploits0References1
Prion
Prion
•added 2020/02/10 1:15 a.m.•28 views

Code injection

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8AI score0.01518EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2020/02/10 1:15 a.m.•51 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS7.2AI score0.01518EPSS
SaveExploits0References3
Mend
Mend
•added 2020/02/10 12:30 a.m.•6 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS0.01518EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/02/10 12:30 a.m.•43 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

8.1AI score0.01518EPSS
SaveExploits0References1
CVE
CVE
•added 2020/02/10 12:30 a.m.•142 views

CVE-2017-18641

CVE-2017-18641 affects LXC 2.0: template scripts fetch code over cleartext HTTP and skip a digital-signature check before bootstrapping containers. Root cause is lack of integrity/authenticity verification during bootstrapping. The connected Red Hat and Ubuntu entries corroborate the same descrip...

9.3CVSS8AI score0.01518EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2020/02/10 12:30 a.m.•51 views

CVE-2017-18641

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS8.1AI score0.01518EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/10 12:00 a.m.•5 views

CVE-2017-18641: Improper Authentication

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

9.3CVSS7.5AI score0.01518EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/08/22 12:00 a.m.•7 views

PT-2020-8190

Name of the Vulnerable Software and Affected Versions: LXC version 2.0 Description: The issue concerns the template scripts in LXC that download code over cleartext HTTP without performing a digital-signature check before executing it to bootstrap containers. Recommendations: For LXC version 2.0,...

9.3CVSS0.01518EPSS
SaveExploits0References10
Packet Storm
Packet Storm
•added 2011/03/03 12:00 a.m.•31 views

Tribiq CMS 5.2.7b Path Disclosure

Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...

SaveExploits0
Rows per page
Query Builder