A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docsUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lxcUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage | Apr 27, 2020 | May 22, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-Sys-GuestfsUpgrade netcf-libs-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-winsupportUpgrade virt-dibUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-lxcUpgrade libguestfsUpgrade seavgabios-binUpgrade libiscsi-debugsourceUpgrade libssh2-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-gzipUpgrade ruby-libguestfsUpgrade ruby-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade netcf-develUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade libvirt-client-debuginfoUpgrade virt-dib-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemuUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-javaUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-bash-completionUpgrade netcf-debuginfoUpgrade nbdkit-develUpgrade virt-v2v-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-bash-completionUpgrade python3-libguestfs-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade perl-hivexUpgrade qemu-imgUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirtUpgrade hivexUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libssh2Upgrade qemu-kvmUpgrade lua-guestfsUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-coreUpgrade libiscsiUpgrade libvirt-debugsourceUpgrade ruby-hivexUpgrade lua-guestfs-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-adminUpgrade supermin-develUpgrade libguestfs-javadocUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade superminUpgrade libvirt-develUpgrade libguestfs-man-pages-ukUpgrade libiscsi-debuginfoUpgrade libvirt-clientUpgrade netcfUpgrade netcf-debugsourceUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-kvmUpgrade supermin-debugsourceUpgrade nbdkitUpgrade libiscsi-develUpgrade qemu-kvm-common-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade sgabiosUpgrade virt-p2v-makerUpgrade perl-Sys-Virt-debugsourceUpgrade supermin-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade libguestfs-toolsUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-libs-debuginfoUpgrade libguestfs-gfs2Upgrade libguestfs-develUpgrade libvirt-daemon-lxcUpgrade seabios-binUpgrade libvirt-nssUpgrade qemu-img-debuginfoUpgrade libguestfs-bash-completionUpgrade python3-libvirt-debuginfoUpgrade hivex-develUpgrade nbdkit-plugin-vddkUpgrade virt-v2vUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-utils-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-config-networkUpgrade hivex-debuginfoUpgrade libvirt-login-shellUpgrade libiscsi-utilsUpgrade libguestfs-java-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-debuginfoUpgrade nbdkit-debuginfoUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade libvirt-dbusUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade python3-libvirtUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-commonUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-xzUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-xfsUpgrade python3-libguestfs | May 31, 2019 | May 22, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | May 22, 2019 |
| Oracle_linux | — | Upgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxc | May 24, 2019 | May 21, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemonUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-commonUpgrade perl-hivex-debuginfoUpgrade libguestfs-bash-completionUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade netcf-libs-debuginfoUpgrade libvirt-adminUpgrade lua-guestfsUpgrade libvirt-develUpgrade nbdkit-develUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-xfsUpgrade hivex-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-python3Upgrade virt-dib-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirtUpgrade perl-Sys-Guestfs-debuginfoUpgrade supermin-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade superminUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcfUpgrade libguestfs-javadocUpgrade libvirt-libsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade sgabiosUpgrade libiscsi-utilsUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xz-debuginfoUpgrade virt-p2v-makerUpgrade supermin-debugsourceUpgrade libguestfs-rescueUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-toolsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-curlUpgrade virt-v2vUpgrade qemu-guest-agentUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-xzUpgrade libvirt-nssUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-hivexUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-python-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-debugsourceUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade seabiosUpgrade nbdkitUpgrade SLOFUpgrade libvirt-daemon-lxcUpgrade libvirt-docsUpgrade hivex-develUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-develUpgrade qemu-kvmUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-java-develUpgrade netcf-debugsourceUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-winsupportUpgrade libvirt-debugsourceUpgrade libguestfs-debuginfoUpgrade hivexUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade netcf-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade hivex-debugsourceUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfsUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-bash-completionUpgrade libguestfs-gobject-debuginfoUpgrade sgabios-binUpgrade libguestfs-javaUpgrade qemu-kvm-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-VirtUpgrade ruby-libguestfsUpgrade libssh2-debugsourceUpgrade netcf-develUpgrade nbdkit-bash-completionUpgrade seavgabios-binUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libiscsiUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-tools-c-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-gobjectUpgrade libiscsi-debugsourceUpgrade qemu-imgUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-clientUpgrade libvirt-nss-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade python3-libvirtUpgrade seabios-binUpgrade libvirt-daemon-kvmUpgrade virt-dibUpgrade qemu-guest-agent-debuginfoUpgrade supermin-develUpgrade nbdkit-plugin-vddkUpgrade ruby-hivexUpgrade libssh2Upgrade nbdkit-example-plugins-debuginfo | May 24, 2019 | May 22, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-adminUpgrade libvirtUpgrade libvirt-docUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-daemon-xen | Dec 19, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libvirt-clientsUpgrade libvirt0Upgrade libvirt-daemon | Jun 20, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub