Threats tagged 'ghsa-xhqx-mgh3-3h7q'

A nil-pointer dereference vulnerability exists in the Incus daemon's CreateCustomVolumeFromBackup function, triggered when processing a custom volume backup with a volume snapshot missing the expires_at field. An authenticated user with permission to create storage volumes can cause the incusd daemon to crash by uploading a crafted backup tarball. This results in a denial of service due to the daemon process terminating unexpectedly.