VDB

CVE-2017-18641

CVE-2017-18641 PUBLISHED CVSS 8.100000381469727 HIGH

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.

EPSS 1.35% · 69.2th percentile

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.35%
69.2th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSlxc-templates*, 0, 3.0.4.48.g4765da8-2
Ubuntu:22.04:LTSlxc-templates3.0.4-5, 0
Ubuntu:20.04:LTSlxc-templates3.0.4-1ubuntu1, 0, 3.0.4-3ubuntu1
Ubuntu:25.10lxc-templates0, *, 3.0.4.79.g84b0597-1
Ubuntu:18.04:LTSlxc-templates3.0.0-0ubuntu1, 3.0.0~beta1-0ubuntu1, 0
Ubuntu:14.04:LTSlxc1.0.0~beta1-0ubuntu3, 1.0.0~beta2-0ubuntu1, 1.0.0~beta3-0ubuntu1
Ubuntu:Pro:16.04:LTSlxc1.1.5-0ubuntu5, 1.1.5-0ubuntu6, 2.0.0~beta2-0ubuntu2

Timeline

  • Feb 10, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Mar 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • May 24, 2022 CVE Updated
  • Jul 5, 2022 EPSS Score
  • Nov 8, 2022 EPSS Score
  • Jan 10, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›