Lucene search

K
ubuntuUbuntuUSN-694-1
HistoryDec 18, 2008 - 12:00 a.m.

libvirt vulnerability

2008-12-1800:00:00
ubuntu.com
33

6.1 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.5%

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10

Packages

  • libvirt -

Details

It was discovered that libvirt did not mark certain operations as read-only. A
local attacker may be able to perform privileged actions such as migrating
virtual machines, adjusting autostart flags, or accessing privileged data in
the virtual machine memory and disks.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibvirt0< 0.4.4-3ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibvirt-bin< 0.4.4-3ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibvirt-dev< 0.4.4-3ubuntu3.1UNKNOWN
Ubuntu8.10noarchlibvirt0-dbg< 0.4.4-3ubuntu3.1UNKNOWN
Ubuntu8.10noarchpython-libvirt< 0.4.4-3ubuntu3.1UNKNOWN
Ubuntu8.04noarchlibvirt0< 0.4.0-2ubuntu8.1UNKNOWN
Ubuntu8.04noarchlibvirt-bin< 0.4.0-2ubuntu8.1UNKNOWN
Ubuntu8.04noarchlibvirt-dev< 0.4.0-2ubuntu8.1UNKNOWN
Ubuntu8.04noarchlibvirt0-dbg< 0.4.0-2ubuntu8.1UNKNOWN
Ubuntu8.04noarchpython-libvirt< 0.4.0-2ubuntu8.1UNKNOWN
Rows per page:
1-10 of 141

6.1 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.5%