Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Dec 19, 2008 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-pythonUpgrade libvirt | Oct 16, 2024 | Dec 19, 2008 |
| Suse | — | Upgrade libvirt-ssh-proxyUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docUpgrade libvirt-client-32bitUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockd | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvirt0 | Nov 8, 2024 | Dec 19, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub