id: GO-2024-3313
modules:
    - module: github.com/canonical/lxd
      versions:
        - fixed: 0.0.0-20240403103450-0e7f2b5bf4d2
      non_go_versions:
        - fixed: 5.21.1
      vulnerable_at: 0.0.0-20231105111322-f14fc05ed333
      packages:
        - package: github.com/canonical/lxd/lxd/auth
          symbols:
            - tls.certificateDetails
          derived_symbols:
            - fga.CheckPermission
            - fga.GetPermissionChecker
            - rbac.CheckPermission
            - rbac.GetPermissionChecker
            - tls.CheckPermission
            - tls.GetPermissionChecker
summary: |-
    Restricted TLS certificate privilege escalation when in PKI mode in
    github.com/canonical/lxd
cves:
    - CVE-2024-6219
ghsas:
    - GHSA-jpmc-7p9c-4rxf
credits:
    - '@markylaing'
references:
    - advisory: https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf
    - fix: https://github.com/canonical/lxd/commit/5cdc9a35b9c51e981b1e70330bde0413ccacc7fd
source:
    id: GHSA-jpmc-7p9c-4rxf
    created: 2024-12-11T10:51:03.583133-05:00
review_status: REVIEWED