Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
CVSS Details
- CVSS 3.1 Base Score: 4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirt-pythonUpgrade libvirtUpgrade libvirt-devel | Dec 1, 2016 | Aug 19, 2010 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 19, 2010 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-pythonUpgrade libvirt | Oct 16, 2024 | Aug 19, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2010 |
| Suse | — | Upgrade libvirt-adminUpgrade libvirt-client-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-ssh-proxyUpgrade libvirt-develUpgrade libvirt-daemon-logUpgrade libvirt-clientUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nssUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-hooksUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-commonUpgrade libvirt-client-32bitUpgrade libvirt-daemon-config-networkUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirtUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-docUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lock | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Aug 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub