Количество 8
Количество 8
GHSA-p8mm-23gg-jc9r
Incus does not verify combined fingerprint when downloading images from simplestreams servers
CVE-2026-33542
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue.
CVE-2026-33542
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue.
CVE-2026-33542
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue.
CVE-2026-33542
Incus does not verify combined fingerprint when downloading images from simplestreams servers
CVE-2026-33542
Incus is a system container and virtual machine manager. Prior to vers ...
BDU:2026-07366
Уязвимость системы управления контейнерами и менеджера виртуальных машин Incus, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
ROS-20260420-73-0042
Уязвимость incus
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-p8mm-23gg-jc9r Incus does not verify combined fingerprint when downloading images from simplestreams servers | 0% Низкий | 4 месяца назад | |
 | CVE-2026-33542 Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue. | CVSS3: 4.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-33542 Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue. | CVSS3: 8.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-33542 Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue. | CVSS3: 4.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-33542 Incus does not verify combined fingerprint when downloading images from simplestreams servers | 0% Низкий | 4 месяца назад | |
| CVE-2026-33542 Incus is a system container and virtual machine manager. Prior to vers ... | CVSS3: 4.8 | 0% Низкий | 4 месяца назад |
 | BDU:2026-07366 Уязвимость системы управления контейнерами и менеджера виртуальных машин Incus, связанная с ошибками процедуры подтверждения подлинности сертификата, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 4.8 | 0% Низкий | 4 месяца назад |
 | ROS-20260420-73-0042 Уязвимость incus | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу