Detections
Analytics
Alpine: multiple incus-feature packages: security update to 6.14.0-r0
high Tenable Cloud Security Plugin ID 436241
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Incus is a system container and virtual machine manager. When using an ACL on a device connected to a
bridge, Incus version 6.12 and 6.13 generates nftables rules for local services (DHCP, DNS...) that
partially bypass security options `security.mac_filtering`, `security.ipv4_filtering` and
`security.ipv6_filtering`. This can lead to DHCP pool exhaustion and opens the door for other attacks. A
patch is available at commit 2516fb19ad8428454cb4edfe70c0a5f0dc1da214. (CVE-2025-52889)
- Incus is a system container and virtual machine manager. When using an ACL on a device connected to a
bridge, Incus versions 6.12 and 6.13generates nftables rules that partially bypass security options
`security.mac_filtering`, `security.ipv4_filtering` and `security.ipv6_filtering`. This can lead to ARP
spoofing on the bridge and to fully spoof another VM/container on the same bridge. Commit
254dfd2483ab8de39b47c2258b7f1cf0759231c8 contains a patch for the issue. (CVE-2025-52890)
See Also
Plugin Details
Severity: High
ID: 436241
Version: Revision 1.4
Type: Local
Published: 12/4/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.8
Percentile: 57.26
CVSS v2
Risk Factor: Medium
Base Score: 6.7
Temporal Score: 5
Vector: CVSS2#AV:A/AC:L/Au:M/C:C/I:N/A:C
CVSS Score Source: CVE-2025-52890
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 6/25/2025
Reference Information
CVE: CVE-2025-52889, CVE-2025-52890