Canonical Ltd. LXD vulnerabilities

3 vulnerabilities

Known vulnerabilities in Canonical Ltd. LXD, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.8CVE-2024-6156canonical ltd.lxd+5
EPSS score
0.16%
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.3.8CVE-2024-6219canonical ltd.lxd+3
EPSS score
0.16%
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.6.7CVE-2023-49721canonical ltd.lxd+2
EPSS score
0.24%
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.