CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.

Score

CVSS 3.1 3.8 Low

Status

Analyzed - security@ubuntu.com

Published

2024-12-06

Last modified

2025-08-28

Weaknesses

CWE-295

Affected products

• Lxd (Canonical)
• Lxd (Canonical Ltd.)

References

• https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf
• https://www.cve.org/CVERecord?id=CVE-2024-6219