Описание
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like security.privileged and raw.lxc) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.
A flaw was found in Incus, a container and virtual machine manager. During instance migration, security-critical configuration overrides bypass project restrictions, allowing a restricted user to escalate privileges and escape the container to the host.
Отчет
Incus is not shipped in any Red Hat product. The community Fedora package is affected.
Меры по смягчению последствий
No mitigation is needed as Incus is not shipped in any Red Hat product.
Дополнительная информация
Статус:
EPSS
9.9 Critical
CVSS3
Связанные уязвимости
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like `security.privileged` and `raw.lxc`) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like `security.privileged` and `raw.lxc`) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.
Incus is a system container and virtual machine manager. Prior to vers ...
EPSS
9.9 Critical
CVSS3