| Package | Affected versions | Patched versions |
|---|---|---|
| lxd | ≥ 6.6, < 6.9 | 6.9 |
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free