6.5
Moyenne
CVE-2026-33743 Incus is a system container and virtual machine manager
Description
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a denial of service of the control plane API. This does not impact any running workload, existing containers and virtual machines will keep operating. Version 6.23.0 fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| incus 6.23 | premières → < 6.23.0 | 6.23.0 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de incus
Les 47 CVE de incus →
CVE-2026-115378
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in…
6.9
Moyenne
CVE-2026-115377
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that…
9.4
Critique
CVE-2026-115376
Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…
8.3
Élevée
CVE-2026-115375
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
9.4
Critique