The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Nov 2, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Nov 2, 2013 |
| Suse | — | Upgrade libvirt-daemon-hooksUpgrade libvirt-clientUpgrade libvirt-daemon-xenUpgrade libvirt-docUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-lxcUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secret | Aug 9, 2024 | Nov 2, 2013 |
| Ubuntu | — | Upgrade libvirt0 | Nov 8, 2024 | Nov 2, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub