The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 9, 2011 |
| Suse | — | Upgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-hooksUpgrade libvirt-adminUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-logUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-qemuUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-docUpgrade libvirt-clientUpgrade libvirt-client-32bitUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-xenUpgrade libvirt-develUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lockUpgrade libvirt-nssUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-network | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub