util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-lxcUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpath | Apr 27, 2020 | Feb 23, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-debuginfoUpgrade libvirt-docsUpgrade libvirtUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-login-shellUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-lxcUpgrade libvirt-daemonUpgrade libvirt-devel | Aug 28, 2019 | Feb 23, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Feb 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Apr 9, 2018 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon | Apr 2, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-kvm | May 1, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilter | Apr 3, 2019 | Feb 23, 2018 |
| Oracle_linux | — | Upgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsi | Nov 6, 2018 | Feb 5, 2018 |
| Redhat_linux | — | Upgrade libvirt-clientUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docsUpgrade libvirt-bash-completionUpgrade libvirt-nssUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilter | Oct 31, 2018 | Feb 23, 2018 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-managerUpgrade virt-manager-commonUpgrade libvirt-nssUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-qemuUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade virt-installUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-xenUpgrade libvirt-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-client | Apr 4, 2018 | Feb 23, 2018 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Apr 25, 2018 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub