fr Sign in

6.7 Medium

CVE-2023-49721 An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD

Description

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.

Affected products and versions

Product	Affected versions	Fixed in
LXD	0	No fix stated
LXD	Versions not published

References

bugs.launchpad.net bugs.launchpad.net
nvd.nist.gov nvd.nist.gov
www.openwall.com www.openwall.com
bugs.launchpad.net bugs.launchpad.net

Timeline

Published February 14, 2024
Last modified October 24, 2024

The 3 CVEs of LXD →

CVE-2024-6219 Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust… 3.8 Low CVE-2024-6156 Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was… 3.8 Low

Track this CVE