| Package | Affected versions | Patched versions |
|---|---|---|
| lxd | ≥ 5.0.0, < 5.21.5≥ 6.0, < 6.9 | 5.21.56.9 |
Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause a denial of service via a specially crafted custom-volume backup tarball that omits the expires_at snapshot field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free