A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Apr 3, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemonUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-hooksUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-scsiUpgrade wireshark-plugin-libvirtUpgrade libvirt-develUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-xenUpgrade libvirtUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-lxc | Jan 5, 2022 | Jan 4, 2022 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-daemon-systemUpgrade libvirt-daemon | May 3, 2022 | Jan 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub