A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-docsUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-lock-sanlockUpgrade libvirt-bash-completionUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-core | Apr 27, 2020 | May 22, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-gobject-develUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade netcf-develUpgrade libguestfsUpgrade ruby-libguestfsUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-coreUpgrade nbdkit-debugsourceUpgrade lua-guestfsUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade perl-hivexUpgrade hivex-debugsourceUpgrade virt-dibUpgrade libvirt-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-v2v-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvmUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-develUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-debuginfoUpgrade ruby-hivexUpgrade perl-hivex-debuginfoUpgrade nbdkit-basic-pluginsUpgrade netcf-libs-debuginfoUpgrade libiscsiUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nss-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobjectUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javaUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-python-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-vddk-debuginfoUpgrade hivexUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirtUpgrade qemu-kvm-core-debuginfoUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-winsupportUpgrade libssh2Upgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libiscsi-debugsourceUpgrade seavgabios-binUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade netcfUpgrade seabiosUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade hivex-develUpgrade qemu-img-debuginfoUpgrade python3-libvirtUpgrade netcf-debugsourceUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libiscsi-develUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade sgabiosUpgrade superminUpgrade libvirt-develUpgrade netcf-libsUpgrade qemu-kvm-common-debuginfoUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-xzUpgrade libguestfs-rsyncUpgrade python3-hivexUpgrade sgabios-binUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-java-debuginfoUpgrade supermin-develUpgrade libguestfs-javadocUpgrade libvirt-login-shellUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkitUpgrade libvirt-clientUpgrade libguestfs-xfsUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-kvmUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-lock-sanlock-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libssh2-debuginfoUpgrade seabios-binUpgrade libguestfs-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-nssUpgrade libguestfs-toolsUpgrade hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-lxcUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-iscsiUpgrade virt-p2v-makerUpgrade nbdkit-plugin-vddkUpgrade libiscsi-utilsUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-rescueUpgrade libguestfs-java-develUpgrade supermin-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libguestfsUpgrade libvirt-admin | May 31, 2019 | May 22, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | May 22, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secretUpgrade libvirt-lock-sanlockUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-adminUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-qemu | May 24, 2019 | May 21, 2019 |
| Redhat_linux | — | Upgrade seavgabios-binUpgrade libvirt-dbusUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libguestfs-winsupportUpgrade seabiosUpgrade libguestfs-rsyncUpgrade netcf-develUpgrade python3-libguestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debugsourceUpgrade libvirt-client-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade hivexUpgrade libguestfs-tools-cUpgrade libvirt-docsUpgrade libguestfs-gobject-develUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-example-pluginsUpgrade libssh2-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-core-debuginfoUpgrade libiscsiUpgrade libvirt-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-libs-debuginfoUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade sgabios-binUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkitUpgrade libguestfs-javaUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-gobjectUpgrade SLOFUpgrade libvirt-daemon-driver-lxcUpgrade nbdkit-plugin-python-commonUpgrade libssh2Upgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-debuginfoUpgrade seabios-binUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-network-debuginfoUpgrade perl-Sys-VirtUpgrade supermin-develUpgrade libguestfs-gobject-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-debuginfoUpgrade libguestfsUpgrade qemu-imgUpgrade hivex-debugsourceUpgrade qemu-kvm-block-sshUpgrade hivex-develUpgrade libvirt-clientUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-kvmUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-coreUpgrade netcf-debuginfoUpgrade python3-libvirtUpgrade nbdkit-bash-completionUpgrade netcf-libsUpgrade qemu-kvmUpgrade supermin-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libiscsi-utilsUpgrade hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-glusterUpgrade libvirt-admin-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-xfsUpgrade nbdkit-develUpgrade perl-Sys-GuestfsUpgrade libssh2-debuginfoUpgrade libvirt-develUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-login-shellUpgrade libguestfs-inspect-iconsUpgrade libvirt-nssUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade netcfUpgrade supermin-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade python3-hivexUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-networkUpgrade libguestfs-rescueUpgrade ruby-hivex-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-dbus-debuginfoUpgrade virt-v2v-debuginfoUpgrade python3-hivex-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-bash-completionUpgrade libvirt-daemonUpgrade libiscsi-utils-debuginfoUpgrade libvirt-python-debugsourceUpgrade sgabiosUpgrade qemu-kvm-commonUpgrade perl-hivex-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-adminUpgrade qemu-kvm-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-debugsourceUpgrade libguestfs-javadocUpgrade libvirtUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade superminUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-img-debuginfoUpgrade libiscsi-debuginfoUpgrade python3-libguestfsUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade ruby-libguestfs-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libiscsi-develUpgrade nbdkit-plugin-xzUpgrade virt-dib-debuginfo | May 24, 2019 | May 22, 2019 |
| Suse | — | Upgrade libvirt-docUpgrade libvirtUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libvirt-nssUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-qemuUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interface | Dec 19, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libvirt-daemonUpgrade libvirt0Upgrade libvirt-clients | Jun 20, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub