The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 14, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 9, 2011 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-adminUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-pythonUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-qemuUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-client-qemuUpgrade libvirt-docUpgrade libvirtUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-xenUpgrade libvirt-client-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-qemu | Aug 9, 2024 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub