Approved changes feed: RSS · Atom

cpe:2.3:a:canonical_ltd.:lxd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCanonical Ltd. (21cecf50-6351-52a5-ba2e-69c633014465)
ProductLxd (79d8d747-d36a-5b41-a1f4-0ca24f6bede4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6219 vulnerable 2026-06-03 14:58:02.263145 Details available
LOW (3.8)
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.
Published: 2024-12-05T23:13:19.635Z
Updated: 2025-08-28T13:29:18.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6156 vulnerable 2026-06-03 14:58:02.034653 Details available
LOW (3.8)
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
Published: 2024-12-05T23:11:04.815Z
Updated: 2025-03-18T15:58:10.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49721 vulnerable 2026-06-03 14:53:26.239744 Details available
MEDIUM (6.7)
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
Published: 2024-02-14T21:57:40.878Z
Updated: 2024-10-24T16:44:29.650Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.