The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.
CVSS Details
- CVSS 3.1 Base Score: 8.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 30, 2017 | Apr 15, 2014 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 15, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Apr 15, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2013 |
| Suse | — | Upgrade libvirtUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-login-shellUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-driver-nodedevUpgrade sle-sdk-releaseUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-umlUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-umlUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-vboxUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-xenUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libvirt-devel-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage | May 29, 2014 | Apr 15, 2014 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Apr 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub