Security Advisories for github.com/canonical/lxd in go
Critical
6 days ago
LXD has restricted project bypass leading to arbitrary command execution
go
github.com/canonical/lxd
High
6 days ago
LXD has project restriction bypass for custom volume copy across projects
go
github.com/canonical/lxd
High
6 days ago
LXD has project restriction bypass in instance copy across projects
go
github.com/canonical/lxd
Moderate
7 days ago
LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at
go
github.com/canonical/lxd
Critical
7 days ago
LXD has arbitrary file write on client due to trusted image hash
go
github.com/canonical/lxd
Critical
7 days ago
LXD has argument injection in backup compression algorithm leading to AFW and ACE
go
github.com/canonical/lxd
Critical
7 days ago
LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image
go
github.com/canonical/lxd
Critical
7 days ago
LXD has arbitrary file read+write on host via templates/ symlink in malicious image
go
github.com/canonical/lxd
Critical
7 days ago
LXD has arbitrary file write on host via `exec-output` symlink in crafted image
go
github.com/canonical/lxd
Moderate
7 days ago
LXD: SSRF via image import from URL allows internal network probing by authenticated users
go
github.com/canonical/lxd
High
8 days ago
lxd allows Cross-guest volume hijack via DevLXD device patch
go
github.com/canonical/lxd
Critical
7 months ago
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
go
github.com/canonical/lxd
Critical
7 months ago
LXD: Importing a crafted backup leads to project restriction bypass
go
github.com/canonical/lxd
Critical
7 months ago
LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin
go
github.com/canonical/lxd
Moderate
8 months ago
lxd's non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints
go
github.com/canonical/lxd
High
12 months ago
LXD vulnerable to a local privilege escalation through custom storage volumes
go
github.com/canonical/lxd
High
about 1 year ago
Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
go
github.com/canonical/lxd
Likely fork
High
about 1 year ago
Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns
go
github.com/lxc/lxd
Moderate
about 1 year ago
Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server
go
github.com/canonical/lxd
High
about 1 year ago
Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API
go
github.com/canonical/lxd
Moderate
about 1 year ago
Canonical LXD Project Existence Determination Through Error Handling in Image Export Function
go
github.com/canonical/lxd
High
about 1 year ago
Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function
go
github.com/canonical/lxd
Moderate
about 1 year ago
Canonical LXD Project Existence Determination Through Error Handling in Image Get Function
go
github.com/canonical/lxd
Low
almost 2 years ago
lxd has a restricted TLS certificate privilege escalation when in PKI mode
go
github.com/canonical/lxd
Low
almost 3 years ago
Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true
go
github.com/canonical/lxd