Filtered by vendor Canonical Subscriptions
Filtered by product Lxd Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-6156 1 Canonical 1 Lxd 2024-12-10 3.8 Low
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
CVE-2024-6219 1 Canonical 1 Lxd 2024-12-06 3.8 Low
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.
CVE-2023-49721 1 Canonical 1 Lxd 2024-11-21 6.7 Medium
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
CVE-2016-1582 1 Canonical 2 Lxd, Ubuntu Linux 2024-11-21 N/A
LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.
CVE-2016-1581 1 Canonical 2 Lxd, Ubuntu Linux 2024-11-21 N/A
LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.