util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-bash-completionUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-lxcUpgrade libvirt-login-shellUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt | Apr 27, 2020 | Feb 23, 2018 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-adminUpgrade libvirt-login-shellUpgrade libvirt-daemon-config-networkUpgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-gluster | Aug 28, 2019 | Feb 23, 2018 |
| Debian | — | Upgrade libvirt | Mar 17, 2018 | Feb 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Apr 9, 2018 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interface | Apr 2, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilter | May 1, 2019 | Feb 23, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-core | Apr 3, 2019 | Feb 23, 2018 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nssUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-devel | Nov 6, 2018 | Feb 5, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libvirt-lock-sanlockUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-debuginfo | Oct 31, 2018 | Feb 23, 2018 |
| Suse | — | Upgrade virt-manager-commonUpgrade virt-installUpgrade libvirt-client-32bitUpgrade libvirt-daemon-lxcUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade virt-managerUpgrade libvirt-libsUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-network | Apr 4, 2018 | Feb 23, 2018 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Apr 25, 2018 | Feb 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub