Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 11, 2016 |
| Freebsd | — | Upgrade libvirt | Dec 10, 2025 | Dec 20, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Apr 11, 2016 |
| Oracle_linux | — | Upgrade libvirt-docsUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-interface | Nov 9, 2016 | Apr 11, 2016 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-docsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-lxcUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterNo solution existsUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-debuginfoUpgrade libvirt-lock-sanlock | Nov 4, 2016 | Apr 11, 2016 |
| Suse | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-qemuUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-devel-32bitUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-hooksUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-storageUpgrade libvirt-docUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-network | Feb 2, 2016 | Feb 1, 2016 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Feb 2, 2016 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub