CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-6156 incus Corrigé dans: 6.0.3-1
- Ubuntu UBUNTU-CVE-2024-6156 lxd
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report github.com
- report cve.org