The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Dec 19, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Dec 19, 2014 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secret | Oct 16, 2024 | Dec 19, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-docUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-client-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedev | Dec 18, 2015 | Dec 19, 2014 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Dec 19, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub