UbuntuUSN-4371-1libvirt vulnerabilities
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.8%
Releases
- Ubuntu 19.10
- Ubuntu 18.04 ESM
Packages
- libvirt - Libvirt virtualization toolkit
Details
It was discovered that libvirt incorrectly handled an active pool without a
target path. A remote attacker could possibly use this issue to cause
libvirt to crash, resulting in a denial of service. (CVE-2020-10703)
It was discovered that libvirt incorrectly handled memory when retrieving
certain domain statistics. A remote attacker could possibly use this issue
to cause libvirt to consume resources, resulting in a denial of service.
This issue only affected Ubuntu 19.10. (CVE-2020-12430)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 19.10 | noarch | libvirt-clients | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libnss-libvirt | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libnss-libvirt-dbgsym | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-clients-dbgsym | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon-dbgsym | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon-driver-storage-gluster | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon-driver-storage-gluster-dbgsym | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon-driver-storage-rbd | < 5.4.0-0ubuntu5.4 | UNKNOWN |
| Ubuntu | 19.10 | noarch | libvirt-daemon-driver-storage-rbd-dbgsym | < 5.4.0-0ubuntu5.4 | UNKNOWN |
Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.8%