Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 11, 2016 |
| Freebsd | — | Upgrade libvirt | Dec 10, 2025 | Dec 20, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Apr 11, 2016 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-interface | Nov 9, 2016 | Apr 11, 2016 |
| Redhat_linux | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-lxcUpgrade libvirtUpgrade libvirt-docsNo solution existsUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-login-shellUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilter | Nov 4, 2016 | Apr 11, 2016 |
| Suse | — | Upgrade libvirt-libsUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-hooksUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-nssUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-docUpgrade libvirt-bash-completionUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-disk | Feb 2, 2016 | Feb 1, 2016 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub