Fluid Attacks Database

Description

Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	incus	=6.0.4-2 \|\| =6.0.4-3 \|\| =6.0.5-1 \|\| =6.0.5-2 \|\| =6.0.5-3 \|\| =6.0.5-4 \|\| =6.0.5-5 \|\| =6.0.5-6 \|\| =6.0.5-7 \|\| =6.0.5-8 \|\| =6.0.6-1 \|\| =6.0.6-2 \|\| =6.0.6-3 \|\| =6.14.0-1~exp1 \|\| =6.15.0-1~exp1 \|\| =6.16.0-1~exp1 \|\| =6.17.0-1~exp1 \|\| =6.20.0-1~exp1 \|\| =6.21.0-1~exp1 \|\| =6.22.0-1~exp1 \|\| =6.23.0-1~exp1 \|\| =7.0.0-1~bpo13+1 \|\| >=0 <7.0.0-1	7.0.0-1
go	github.com/lxc/incus/v6/cmd/incusd	>=0 <7.0.0	7.0.0
debian 13	incus	=6.0.4-2 \|\| =6.0.4-2+deb13u1 \|\| =6.0.4-2+deb13u1~bpo12+1 \|\| =6.0.4-2+deb13u2 \|\| =6.0.4-2+deb13u2~bpo12+1 \|\| =6.0.4-2+deb13u3 \|\| =6.0.4-2+deb13u3~bpo12+1 \|\| =6.0.4-2+deb13u4 \|\| =6.0.4-2+deb13u4~bpo12+1 \|\| =6.0.4-2+deb13u5 \|\| =6.0.4-2+deb13u5~bpo12+1 \|\| =6.0.4-2+deb13u6 \|\| =6.0.4-2+deb13u6~bpo12+1 \|\| =6.0.4-2+deb13u7~bpo12+1 \|\| >=0 <6.0.4-2+deb13u7	6.0.4-2+deb13u7
go	github.com/lxc/incus	-	-
go	github.com/lxc/incus/v6	-	-
go	github.com/lxc/incus/v7	>=0 <7.0.0	7.0.0
alpine v3.24	incus	>=0 <7.0.0-r0	7.0.0-r0

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.