A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-nssUpgrade libvirt-daemon-config-networkUpgrade libvirt-libsUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-lxc | Apr 27, 2020 | May 22, 2019 |
| Centos_linux | — | Upgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade superminUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-debugsourceUpgrade virt-v2vUpgrade libguestfs-debugsourceUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemonUpgrade perl-Sys-Virt-debugsourceUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-rescueUpgrade libvirt-nssUpgrade libvirt-clientUpgrade python3-libvirt-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-toolsUpgrade perl-Sys-Virt-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkitUpgrade netcfUpgrade sgabiosUpgrade libguestfs-develUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-develUpgrade virt-p2v-makerUpgrade libguestfs-java-debuginfoUpgrade libguestfs-bash-completionUpgrade hivex-develUpgrade libvirt-libsUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade sgabios-binUpgrade libvirt-dbus-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-curlUpgrade hivex-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-lxcUpgrade libiscsi-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-secretUpgrade supermin-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-login-shellUpgrade supermin-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-adminUpgrade seabiosUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-java-develUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-vddkUpgrade libvirt-dbusUpgrade qemu-kvm-block-curl-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-xfsUpgrade libssh2-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-utilsUpgrade libguestfs-gfs2Upgrade python3-hivexUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-winsupportUpgrade libvirt-debuginfoUpgrade netcf-debuginfoUpgrade qemu-kvm-coreUpgrade ruby-hivexUpgrade nbdkit-basic-pluginsUpgrade lua-guestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-docsUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-debugsourceUpgrade hivex-debugsourceUpgrade qemu-kvmUpgrade lua-guestfsUpgrade virt-dibUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-tools-cUpgrade ruby-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-core-debuginfoUpgrade libiscsiUpgrade nbdkit-plugin-vddk-debuginfoUpgrade perl-hivexUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-lock-sanlockUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade hivexUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-python-debugsourceUpgrade qemu-imgUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade virt-dib-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-debuginfoUpgrade libssh2-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-man-pages-jaUpgrade qemu-guest-agent-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libssh2Upgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-rbdUpgrade netcf-develUpgrade libvirtUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-javaUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-ssh | May 31, 2019 | May 22, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | May 22, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-clientUpgrade libvirt-daemon-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-lxcUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-network | May 24, 2019 | May 21, 2019 |
| Redhat_linux | — | Upgrade nbdkit-basic-pluginsUpgrade libvirt-dbusUpgrade nbdkitUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade sgabios-binUpgrade python3-libguestfs-debuginfoUpgrade netcf-develUpgrade hivexUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-debugsourceUpgrade netcf-libsUpgrade libguestfs-rsyncUpgrade perl-Sys-VirtUpgrade libguestfs-gobjectUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade perl-hivexUpgrade libguestfs-gobject-develUpgrade qemu-kvmUpgrade seabiosUpgrade virt-dibUpgrade netcf-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade netcf-debugsourceUpgrade libguestfs-java-develUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade hivex-develUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-core-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-lxcUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivex-debugsourceUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-sshUpgrade ruby-libguestfsUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libssh2Upgrade qemu-kvm-coreUpgrade libvirt-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-tools-cUpgrade supermin-develUpgrade python3-libvirtUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade seavgabios-binUpgrade SLOFUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-example-pluginsUpgrade libguestfs-javaUpgrade libvirt-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-glusterUpgrade perl-hivex-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-adminUpgrade libguestfs-javadocUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-nssUpgrade libiscsi-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-hivexUpgrade virt-v2vUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-debuginfoUpgrade python3-libguestfsUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libvirt-debuginfoUpgrade libiscsi-develUpgrade hivex-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-rescueUpgrade sgabiosUpgrade libguestfs-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade virt-p2v-makerUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-debugsourceUpgrade netcfUpgrade libvirt-dbus-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirtUpgrade superminUpgrade supermin-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-libsUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemonUpgrade libguestfs-java-debuginfoUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade netcf-libs-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libssh2-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-develUpgrade libguestfs-xfsUpgrade libvirt-login-shellUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-GuestfsUpgrade nbdkit-devel | May 24, 2019 | May 22, 2019 |
| Suse | — | Upgrade libvirt-develUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-docUpgrade libvirt-nssUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirtUpgrade libvirt-daemon-xenUpgrade libvirt-adminUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-libsUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interface | Dec 19, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libvirt-daemonUpgrade libvirt-clientsUpgrade libvirt0 | Jun 20, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub