A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Apr 3, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade libvirt-libsUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-qemuUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-nssUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-lock-sanlockUpgrade libvirt-docUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-xen | Jan 5, 2022 | Jan 4, 2022 |
| Ubuntu | — | Upgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-systemUpgrade libvirt-daemonUpgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt0Upgrade libvirt0 (Ubuntu Pro) | May 3, 2022 | Jan 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub