Proxmox VE security advisories
Every advisory Proxmox has published in the forum, with packages, fixed versions and CVSS scores.
34 advisories
RSS feed for PVE
- Incomplete privilege checks for outgoing remote migration
qemu-server, pve-container
–No score - Guest overwrite due to incorrect application of pool ACLs
qemu-server, pve-container
–No score - –No score
- –No score
- User impersonation via inconsistent ticket encoding
libpve-common-perl
–No score - 9.8Critical
- –No score
- XSS in consent-text datacenter option
pve-manager, libpve-cluster-perl
–No score - Missing validation of network configuration fields
libpve-common-perl, pve-manager
–No score - –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- –No score
- 9.3Critical
- VMA extraction path escape
pve-qemu-kvm
–No score - ESXi importer: path traversal in vmx parser
libpve-storage-perl
–No score - pxar/container restore target rootfs escape
pve-container, proxmox-backup-client, rust-pxar
–No score - PBS backup access includes host/NNN groups
libpve-storage-perl
–No score - Command injection via import of malicious OVA file
libpve-storage-perl, qemu-server
–No score - integrity bypass of encrypted backups on an untrusted PBS instance
proxmox-backup-client, proxmox-backup-file-restore, libproxmox-backup-qemu0
–No score - password change via incomplete username validation
pve-access-control
–No score