Moole Vulnerability Database

Find real vulnerabilities before they ship

Low

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.

VectorLOCAL

PublishedDec 06, 2024, 00:15

Published Bysecurity@ubuntu.com

Base Score

Score3.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/canonical/lxd(Go)00.0.0-20240403103450-0e7f2b5bf4d2N/A

References

https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf
https://www.cve.org/CVERecord?id=CVE-2024-6219

Weakness Type

CWE-295

CVSS Metrics

Base Score

3.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Base SeverityLow

Version

3.1

Attack Vector (AV)

LOCAL