Privilege escalation through malicious OCI container image
Affected packages
pve-container
Details
The check for control characters in the configuration keys of OCI container images was too permissive, allowing a user with privileges to upload a malicious image to inject lines into the generated LXC configuration of containers created using this OCI image.
This could be used trigger execution of arbitrary commands as root on the host.
The issue was privately reported by Finn van der Knaap.
Fixed in
- pve-container >= 6.1.14
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.