Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-41685

Опубликовано: 07 мая 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.3

Описание

Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.images_volume and storage.backups_volume as those users will have large uploads be stored on those volumes rather than directly on the host filesystem. This is the default behavior on IncusOS. This issue has been patched in version 7.0.0.

РелизСтатусПримечание
devel

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

jammy

DNE

noble

needs-triage

questing

ignored

end of life, was needs-triage
resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 26%
0.00333
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
3 месяца назад

Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.images_volume and storage.backups_volume as those users will have large uploads be stored on those volumes rather than directly on the host filesystem. This is the default behavior on IncusOS. This issue has been patched in version 7.0.0.

CVSS3: 4.3
debian
3 месяца назад

Incus is a system container and virtual machine manager. Prior to vers ...

CVSS3: 4.3
redos
около 1 месяца назад

Уязвимость incus

CVSS3: 4.3
github
3 месяца назад

Incus is affected by unbounded binary import disk exhaustion

CVSS3: 4.3
fstec
3 месяца назад

Уязвимость серверного демона incusd системы управления контейнерами и менеджера виртуальных машин Incus, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 26%
0.00333
Низкий

4.3 Medium

CVSS3

Уязвимость CVE-2026-41685