vulnerability

Alma Linux: CVE-2020-10703: Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update (ALSA-2020-4676)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Jun 2, 2020
Added
May 4, 2022
Modified
Nov 14, 2024

Description

A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as network-based pools like gluster and RBD. Unprivileged users with a read-only connection could abuse this flaw to crash the libvirt daemon, resulting in a potential denial of service.

Solution(s)

alma-upgrade-hivexalma-upgrade-hivex-develalma-upgrade-libguestfs-winsupportalma-upgrade-libiscsialma-upgrade-libiscsi-develalma-upgrade-libiscsi-utilsalma-upgrade-libnbdalma-upgrade-libnbd-develalma-upgrade-libvirtalma-upgrade-libvirt-adminalma-upgrade-libvirt-bash-completionalma-upgrade-libvirt-clientalma-upgrade-libvirt-daemonalma-upgrade-libvirt-daemon-config-networkalma-upgrade-libvirt-daemon-config-nwfilteralma-upgrade-libvirt-daemon-driver-interfacealma-upgrade-libvirt-daemon-driver-networkalma-upgrade-libvirt-daemon-driver-nodedevalma-upgrade-libvirt-daemon-driver-nwfilteralma-upgrade-libvirt-daemon-driver-secretalma-upgrade-libvirt-daemon-driver-storagealma-upgrade-libvirt-daemon-driver-storage-corealma-upgrade-libvirt-daemon-driver-storage-diskalma-upgrade-libvirt-daemon-driver-storage-iscsialma-upgrade-libvirt-daemon-driver-storage-iscsi-directalma-upgrade-libvirt-daemon-driver-storage-logicalalma-upgrade-libvirt-daemon-driver-storage-mpathalma-upgrade-libvirt-daemon-driver-storage-rbdalma-upgrade-libvirt-daemon-driver-storage-scsialma-upgrade-libvirt-dbusalma-upgrade-libvirt-develalma-upgrade-libvirt-docsalma-upgrade-libvirt-libsalma-upgrade-libvirt-nssalma-upgrade-nbdfusealma-upgrade-nbdkitalma-upgrade-nbdkit-bash-completionalma-upgrade-nbdkit-basic-filtersalma-upgrade-nbdkit-basic-pluginsalma-upgrade-nbdkit-curl-pluginalma-upgrade-nbdkit-develalma-upgrade-nbdkit-example-pluginsalma-upgrade-nbdkit-gzip-pluginalma-upgrade-nbdkit-linuxdisk-pluginalma-upgrade-nbdkit-python-pluginalma-upgrade-nbdkit-serveralma-upgrade-nbdkit-ssh-pluginalma-upgrade-nbdkit-vddk-pluginalma-upgrade-nbdkit-xz-filteralma-upgrade-netcfalma-upgrade-netcf-develalma-upgrade-netcf-libsalma-upgrade-ocaml-hivexalma-upgrade-ocaml-hivex-develalma-upgrade-ocaml-libguestfsalma-upgrade-ocaml-libguestfs-develalma-upgrade-ocaml-libnbdalma-upgrade-ocaml-libnbd-develalma-upgrade-perl-hivexalma-upgrade-perl-sys-virtalma-upgrade-python3-hivexalma-upgrade-python3-libnbdalma-upgrade-python3-libvirtalma-upgrade-ruby-hivexalma-upgrade-seabiosalma-upgrade-seabios-binalma-upgrade-seavgabios-binalma-upgrade-sgabiosalma-upgrade-sgabios-binalma-upgrade-superminalma-upgrade-supermin-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.