An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Sep 21, 2026 | Aug 7, 2026 |
| Redhat_linux | — | No solution exists | Aug 10, 2026 | Aug 6, 2026 |
| Ubuntu | — | Upgrade libnss-libvirt (Ubuntu Pro)Upgrade libvirt-wiresharkUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-ssh-proxyUpgrade libvirt-wireshark (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-devUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clients (Ubuntu Pro)Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-system-sysv (Ubuntu Pro)Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-dev (Ubuntu Pro)Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-zfs (Ubuntu Pro)Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clients-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-sanlockUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-gluster (Ubuntu Pro)Upgrade libvirt-login-shellUpgrade libvirt-daemon-system-systemd (Ubuntu Pro)Upgrade libvirt-daemon-driver-xenUpgrade libvirt-daemon-driver-storage-rbd (Ubuntu Pro)Upgrade libvirt-daemon-driver-lxc (Ubuntu Pro)Upgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-xen (Ubuntu Pro)Upgrade libvirt-daemon-driver-vbox (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-system (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-systemUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-sanlock (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt0Upgrade libvirt-daemon-driver-storage-sheepdog (Ubuntu Pro)Upgrade libvirt-daemon-commonUpgrade libvirt-commonUpgrade libvirt-daemon-system-sysvUpgrade libvirt-clientsUpgrade libvirt0 (Ubuntu Pro)Upgrade libvirt-daemon-driver-storage-zfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-qemu (Ubuntu Pro)Upgrade libvirt-daemon (Ubuntu Pro)Upgrade libvirt-bin (Ubuntu Pro)Upgrade libnss-libvirtUpgrade libvirt-daemon-system-systemd | Aug 20, 2026 | Aug 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub