A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-develUpgrade libvirt-libsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-adminUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secretUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-docsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-lxc | Apr 27, 2020 | May 22, 2019 |
| Centos_linux | — | Upgrade nbdkit-plugin-vddk-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-gobject-develUpgrade virt-v2v-debuginfoUpgrade nbdkit-bash-completionUpgrade netcf-debuginfoUpgrade nbdkit-develUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storageUpgrade netcf-develUpgrade lua-guestfsUpgrade ruby-libguestfsUpgrade libssh2Upgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-imgUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfsUpgrade libvirt-docsUpgrade qemu-kvmUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-network-debuginfoUpgrade hivex-debugsourceUpgrade hivexUpgrade qemu-guest-agent-debuginfoUpgrade libvirtUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-coreUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade perl-hivex-debuginfoUpgrade virt-dibUpgrade ruby-hivexUpgrade nbdkit-basic-pluginsUpgrade netcf-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-benchmarkingUpgrade libguestfs-tools-cUpgrade nbdkit-example-plugins-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade seavgabios-binUpgrade libiscsi-debugsourceUpgrade libguestfs-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade virt-dib-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javaUpgrade libguestfs-gobjectUpgrade qemu-kvm-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-inspect-iconsUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade netcf-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curlUpgrade python3-libguestfsUpgrade hivex-develUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-vddkUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-libsUpgrade libvirt-daemonUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-lxcUpgrade libiscsi-develUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-rescueUpgrade qemu-kvm-commonUpgrade libvirt-clientUpgrade libvirt-nssUpgrade hivex-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-guest-agentUpgrade python3-hivexUpgrade netcfUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-networkUpgrade libguestfs-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-xzUpgrade seabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade python3-hivex-debuginfoUpgrade nbdkit-example-pluginsUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbusUpgrade sgabios-binUpgrade libguestfs-java-develUpgrade libvirt-admin-debuginfoUpgrade python3-libvirtUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-utilsUpgrade superminUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-v2vUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-xfsUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkitUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade seabiosUpgrade libvirt-adminUpgrade libiscsi-debuginfoUpgrade libguestfs-java-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-secretUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-login-shellUpgrade supermin-develUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade sgabiosUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-storage-rbdUpgrade virt-p2v-makerUpgrade libvirt-devel | May 31, 2019 | May 22, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | May 22, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-nssUpgrade libvirt-daemon-qemuUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-bash-completionUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedev | May 24, 2019 | May 21, 2019 |
| Redhat_linux | — | Upgrade libguestfs-tools-cUpgrade netcf-debugsourceUpgrade libssh2-debugsourceUpgrade libguestfs-gobjectUpgrade SLOFUpgrade libvirt-daemon-driver-lxcUpgrade perl-hivexUpgrade seabiosUpgrade libiscsi-debugsourceUpgrade seabios-binUpgrade libvirt-daemon-driver-storageUpgrade supermin-develUpgrade perl-Sys-VirtUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade hivexUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-docsUpgrade qemu-kvm-coreUpgrade netcf-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libs-debuginfoUpgrade qemu-imgUpgrade netcf-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ruby-libguestfsUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-sshUpgrade libguestfs-benchmarkingUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-vddkUpgrade lua-guestfs-debuginfoUpgrade libguestfsUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade libvirt-debugsourceUpgrade libiscsiUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libvirt-nss-debuginfoUpgrade nbdkitUpgrade virt-dibUpgrade seavgabios-binUpgrade libguestfs-javaUpgrade netcf-libsUpgrade qemu-kvmUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-lxcUpgrade libguestfs-winsupportUpgrade nbdkit-bash-completionUpgrade libguestfs-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libvirtUpgrade libvirt-daemon-kvmUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-gzipUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2Upgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-xfsUpgrade libvirtUpgrade qemu-kvm-common-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-bash-completionUpgrade python3-libguestfsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-java-debuginfoUpgrade python3-hivex-debuginfoUpgrade libguestfs-gfs2Upgrade ruby-libguestfs-debuginfoUpgrade libvirt-adminUpgrade qemu-kvm-block-rbd-debuginfoUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-commonUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-javadocUpgrade nbdkit-plugin-xzUpgrade libvirt-nssUpgrade python3-hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade virt-p2v-makerUpgrade perl-hivex-debuginfoUpgrade libvirt-python-debugsourceUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-debugsourceUpgrade nbdkit-debuginfoUpgrade libvirt-admin-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-inspect-iconsUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-toolsUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade netcfUpgrade libiscsi-debuginfoUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-secretUpgrade virt-dib-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-img-debuginfoUpgrade libguestfs-man-pages-ukUpgrade superminUpgrade libiscsi-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-develUpgrade qemu-kvm-block-rbdUpgrade libssh2-debuginfoUpgrade perl-Sys-GuestfsUpgrade lua-guestfs | May 24, 2019 | May 22, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-lock-sanlockUpgrade libvirt-daemonUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-libxlUpgrade libvirtUpgrade libvirt-docUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-qemu | Dec 19, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libvirt-daemonUpgrade libvirt0Upgrade libvirt-clients | Jun 20, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub