PT-2026-37137 · Incus+1 · Incus+1
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Incus versions prior to 7.0.0
Description
Missing error handling in the
TransferManager.UploadAllFiles() function allows an authenticated user to cause a daemon crash. The issue occurs during the import of a truncated or corrupted storage bucket backup archive. Specifically, the system iterates over tar entries but only checks for io.EOF from tr.Next(). If a non-EOF error occurs, such as an unexpected EOF from a truncated archive, the header hdr becomes nil, leading to a nil-pointer dereference when the code attempts to access hdr.Name, which triggers a daemon panic.Recommendations
Update to version 7.0.0.
Exploit
Fix
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Incus
Red Os