util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-nssUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemu | Apr 27, 2020 | Feb 23, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirt-daemon-lxcUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-mpath | Aug 28, 2019 | Feb 23, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Feb 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Apr 9, 2018 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilter | Apr 2, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage | May 1, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secret | Apr 3, 2019 | Feb 23, 2018 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-bash-completionUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlock | Nov 6, 2018 | Feb 5, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-bash-completionUpgrade libvirt-docs | Oct 31, 2018 | Feb 23, 2018 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-clientUpgrade libvirt-adminUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirtUpgrade libvirt-daemon-xenUpgrade virt-installUpgrade virt-managerUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docUpgrade libvirt-client-32bitUpgrade virt-manager-commonUpgrade libvirt-nssUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-qemu | Apr 4, 2018 | Feb 23, 2018 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Apr 25, 2018 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub