CVE-2013-4400: Undefined Security Weakness

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

Moderate: Red Hat Bug Fix Advisory: libvirt bug fix and enhancement update

Updated libvirt packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools...

Ubuntu Update for libvirt USN-2026-1

Check for the Version of libvirt OpenVAS Vulnerability Test $Id: gbubuntuUSN20261.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for libvirt USN-2026-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Libvirt code privilege escalation

virConnectDomainXMLToNative invalid privileges check...

[USN-2026-1] libvirt vulnerability

========================================================================== Ubuntu Security Notice USN-2026-1 November 11, 2013 libvirt vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu: Security Advisory (USN-2026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: libvirt-1.1.3.1-1.fc20

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Fedora 20 : libvirt-1.1.3.1-1.fc20 (2013-20869)

Rebased to version 1.1.3.1 - CVE-2013-4400: virt-login-shell arbitrary file overwrites vulnerability bz 1015228, bz 1025685 - Fix possible domain disappearance on libvirtd crash bz 1015246 - Fix LXC container startup failure bz 1014847 - Slim down libvirt LXC dependencies bz 1012198 Note that...

Ubuntu 13.10 : libvirt vulnerability (USN-2026-1)

It was discovered that libvirt incorrectly checked privileges when the virConnectDomainXMLToNative API function was used. An attacker could possibly use this flaw to gain write privileges, contrary to expected behaviour. Note that Tenable Network Security has extracted the preceding description...

USN-2026-1: libvirt vulnerability

It was discovered that libvirt incorrectly checked privileges when the virConnectDomainXMLToNative API function was used. An attacker could possibly use this flaw to gain write privileges, contrary to expected behaviour...

SuSE 11.2 Security Update : libvirt (SAT Patch Number 8348)

This libvirt update fixes a security issue. - EMBARGOED: libvirt: Fix crash in remoteDispatchDomainMemoryStats. bnc838638: CVE-2013-4296 - Regression: vm-install fails to display on SLES 11 SP2 UV2000. bnc817008 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 8421)

libvirt has been updated to the 1.0.5.6 stable release that fixes bugs and security issues : - Fix crash in remoteDispatchDomainMemoryStats. CVE-2013-4296 - virBitmapParse out-of-bounds read access Libvirt on SLES 11 SP3 is not affected:. CVE-2013-5651 - Add support for using 3-arg pkcheck syntax...

Security fix for the ALT Linux 8 package libvirt version 1.1.4-alt1

Nov. 6, 2013 Alexey Shabalin 1.1.4-alt1 - 1.1.4 - fixed CVE-2013-4400, CVE-2013-4401...

PT-2014-2782

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.1.3 Description The issue is related to the remoteClientFreeFunc function in daemon/remote.c. When ACLs are used, this function does not set an identity. As a result, event handler removal is denied, and remote...

PT-2013-4998

Name of the Vulnerable Software and Affected Versions libvirt versions 1.1.2 through 1.1.3 Description The issue allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments. Recommendations For libvirt versions 1.1.2...

CVE-2013-4401

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...

CVE-2013-4401

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...

DEBIAN-CVE-2013-4401

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...

Information disclosure

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...

CVE-2013-4401

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...