Lucene search
K

9 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/13 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-34179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH...

9.1CVSS5.8AI score0.00164EPSS
Exploits1References2
CVE
CVE
added 2026/04/09 9:22 a.m.7 views

CVE-2026-34179

CVE-2026-34179 affects Canonical LXD versions 4.12–6.7. The vulnerability is in the doCertificateUpdate function (lxd/certificates.go) where the Type field is not validated for PUT/PATCH requests to /1.0/certificates/{fingerprint} for restricted TLS certificate users, enabling a remote authentica...

9.1CVSS5.9AI score0.00164EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2026/04/09 9:22 a.m.3 views

CVE-2026-34179

In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certificates/fingerprint for restricted TLS certificate users, allowing a remote authenticated attacker to escalate...

9.1CVSS5.3AI score0.00164EPSS
Exploits1
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

LXD 安全漏洞

LXD is a Canonical open-source container-based system for managing applications on Linux systems. Versions of LXD from 4.12 to 6.7 have security vulnerabilities. These vulnerabilities stem from the lack of validation of the Type field in the doCertificateUpdate function when handling PUT/PATCH...

9.1CVSS5.8AI score0.00164EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.2 views

PT-2026-31597

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.7 Description Canonical LXD versions 4.12 through 6.7 contain a flaw in the doCertificateUpdate function within lxd/certificates.go. This function fails to validate the Type field when processing PUT or...

9.1CVSS5.8AI score0.00164EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 8:0 a.m.4 views

CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS6.6AI score0.00163EPSS
Exploits1References1
OSV
OSV
added 2024/12/06 12:15 a.m.0 views

UBUNTU-CVE-2024-6219

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured...

3.8CVSS5.8AI score0.00163EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.1 views

LXD 安全漏洞

LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD versions prior to 5.21.1 that stems from the fact that restricted certificates can be added to the trust store without their restrictions being adhered to...

3.8CVSS6.3AI score0.00163EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/12/02 12:0 a.m.2 views

PT-2024-37461

Name of the Vulnerable Software and Affected Versions: LXD versions prior to 5.21.1 Description: A restricted certificate could be added to the trust store with its restrictions not honoured in LXD's PKI mode. This occurs when the core.trust ca certificates configuration option is disabled, causi...

8.1CVSS7.6AI score0.39569EPSS
Exploits3References40
Rows per page
Query Builder