Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Apr 11, 2016 |
| Freebsd | — | Upgrade libvirt | Dec 10, 2025 | Dec 20, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Apr 11, 2016 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-login-shellUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-docsUpgrade libvirt-client | Nov 9, 2016 | Apr 11, 2016 |
| Redhat_linux | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterNo solution existsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-lxcUpgrade libvirt-docs | Nov 4, 2016 | Apr 11, 2016 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-client-32bitUpgrade libvirt-daemon-hooksUpgrade libvirt-nssUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-adminUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-develUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-lxcUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbd | Feb 2, 2016 | Feb 1, 2016 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Jan 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub