Skip to content
OpenAdvisories
Medium USN-6738-1 1 CVE

lxd vulnerability

Published Apr 22, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that LXD
incorrectly handled the handshake phase and the use of sequence numbers in SSH
Binary Packet Protocol (BPP). If a user or an automated system were tricked
into opening a specially crafted input file, a remote attacker could possibly
use this issue to bypass integrity checks.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS lxd 2.0.11-0ubuntu1~16.04.4+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS lxd 3.0.3-0ubuntu1~18.04.2+esm1

Vulnerabilities 1

  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    zot kubescape kots k3d Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io

References

  • report
    https://ubuntu.com/security/CVE-2023-48795