Threats tagged 'ghsa-j93m-3j9p-m5m8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.5%	CVE-2026-9639github.com/canonical/lxd · LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at Medium6.5EPSS 0.5%2026-11-06GCVE DatabaseCVE-2026-9639 CVE-2026-9639 is a vulnerability in the LXD daemon's CreateCustomVolumeFromBackup function where an unguarded dereference of a nil pointer occurs on the ExpiresAt field of volume snapshots in a custom volume backup. An authenticated user with permission to create storage volumes can crash the LXD daemon by uploading a crafted backup tarball missing the expires_at field in snapshots. This causes a panic in the Go runtime, resulting in a denial of service. The issue is fixed in commit 0.0.0-20260622081844-85f897013ccd. EPSS 0.5%Report on CVE-2026-9639 Vulnerability CWE-476 #ghsa-j93m-3j9p-m5m8 #go	GCVE Database	2026-11-06

Page 1 of 1