Untriaged
Permalink
CVE-2024-6219
3.8 LOW
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): NONE
- Availability impact (A): NONE
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, …
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.
References
- https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf issue-tracking
- https://www.cve.org/CVERecord?id=CVE-2024-6219 issue-tracking
- https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf issue-tracking
- https://www.cve.org/CVERecord?id=CVE-2024-6219 issue-tracking
- https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf issue-tracking
- https://www.cve.org/CVERecord?id=CVE-2024-6219 issue-tracking
- https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf issue-tracking
- https://www.cve.org/CVERecord?id=CVE-2024-6219 issue-tracking
- https://www.cve.org/CVERecord?id=CVE-2024-6219 issue-tracking
- https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf issue-tracking
Affected products
lxd
- <5.21.1
Matching in nixpkgs
pkgs.lxd-image-server
Creates and manages a simplestreams lxd image server on top of nginx
-
nixos-unstable -
- nixpkgs-unstable 0.0.4
pkgs.python312Packages.pylxd
Library for interacting with the LXD REST API
-
nixos-unstable -
- nixpkgs-unstable 2.3.2
pkgs.python313Packages.pylxd
Library for interacting with the LXD REST API
-
nixos-unstable -
- nixpkgs-unstable 2.3.2
pkgs.terraform-providers.lxd
None
-
nixos-unstable -
- nixpkgs-unstable 2.5.0
Package maintainers
-
@mkg20001 Maciej Krüger <mkg20001+nix@gmail.com>