A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Apr 3, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-qemuUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-xenUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-nwfilter | Jan 5, 2022 | Jan 4, 2022 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt0 (Ubuntu Pro)Upgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-systemUpgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt-daemon | May 3, 2022 | Jan 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub