A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Apr 3, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-docUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-devel-32bitUpgrade libvirt-clientUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemonUpgrade libvirt-libsUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpathUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-lxc | Jan 5, 2022 | Jan 4, 2022 |
| Ubuntu | — | Upgrade libvirt-daemon-systemUpgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemonUpgrade libvirt-bin (Ubuntu Pro)Upgrade libvirt0Upgrade libvirt0 (Ubuntu Pro) | May 3, 2022 | Jan 4, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub