Proxmox security advisories
Every advisory Proxmox has published in the forum, with packages, fixed versions and CVSS scores.
71 advisories
RSS feed
- Incomplete privilege checks for outgoing remote migration
qemu-server, pve-container
–No score - Guest overwrite due to incorrect application of pool ACLs
qemu-server, pve-container
–No score - –No score
- –No score
- User impersonation via inconsistent ticket encoding
libpve-common-perl
–No score - 9.8Critical
- –No score
- XSS in consent-text datacenter option
pve-manager, libpve-cluster-perl
–No score - Missing validation of network configuration fields
libpve-common-perl, pve-manager
–No score - –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- 9.3Critical
- VMA extraction path escape
pve-qemu-kvm
–No score - ESXi importer: path traversal in vmx parser
libpve-storage-perl
–No score - –No score
- –No score
- –No score
- Missing privilege checks when configuring scheduled tape backup jobs
proxmox-backup-server
–No score - Missing validation of chunk sizes during pull sync
proxmox-backup-server
–No score