Vulnerabilities

LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers.

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file…

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes.

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type.

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host.

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz-* headers.

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets project-restricted clients read operations in other projects.

Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operations.

Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys in the default project.

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests.

lxc-ci contains continuous integration and image-build scripts for LXC.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.

Incus is a system container and virtual machine manager.