Bypassing Secure Boot through Insecure Default in EDK2's LXD
CVE-2023-49721

6.7MEDIUM

Key Information:

Vendor
Canonical Ltd.
Status
Lxd
Vendor
CVE Published:
14 February 2024

Summary

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.

Affected Version(s)

LXD Linux 0

References

https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139
issue-tracking
https://nvd.nist.gov/vuln/detail/CVE-2023-48733
issue-tracking
https://www.openwall.com/lists/oss-security/2024/02/14/4
mailing-list

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mate Kukri
.