Back to Database
Status published
Low
CVE-2024-6219
Mark Laing discovered in LXD's PKI mode, until version 5.21.1,...
Vulnerability Description
Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6219
Credits & Attribution
No credits recorded in the NVD database.
References
More from Canonical Ltd.
View All →CVE-2024-9313
Authd PAM module before version 0.3.5 can allow broker-managed users...
High
8.8
CVE-2024-9312
Authd, through version 0.3.6, did not sufficiently randomize user IDs...
High
7.5
CVE-2024-8287
Anbox Management Service, in versions 1.17.0 through 1.23.0, does not...
High
7.5
CVE-2024-8038
Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX...
High
7.9
CVE-2024-8037
Vulnerable juju hook tool abstract UNIX domain socket. When combined...
Medium
6.5
Affected Vendor
Canonical Ltd.
View all reports →Affected Software
LXD
Vulnerable Versions:
0
Timeline
Official Publish:
December 5th, 2024
Last Modified:
August 28th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.