exploitDog

GHSA-rv6g-hrqv-7f3p

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2017-18641
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1661447

EPSS

Процентиль: 70%

0.0135

Низкий

CVE ID

Связанные уязвимости

CVE-2017-18641

CVSS3: 8.1

ubuntu

больше 6 лет назад

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

CVE-2017-18641

CVSS3: 8.1

nvd

больше 6 лет назад

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

CVE-2017-18641

CVSS3: 8.1

debian

больше 6 лет назад

In LXC 2.0, many template scripts download code over cleartext HTTP, a ...

EPSS

Процентиль: 70%

0.0135

Низкий

CVE ID