CVE-2020-10701

2021-05-2700:00:00

ubuntu.com

libvirt api

read-only connections

response timeout

denial of service

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

29.8%

JSON

A missing authorization flaw was found in the libvirt API responsible for
changing the QEMU agent response timeout. This flaw allows read-only
connections to adjust the time that libvirt waits for the QEMU guest agent
to respond to agent commands. Depending on the timeout value that is set,
this flaw can make guest agent commands fail because the agent cannot
respond in time. Unprivileged users with a read-only connection could abuse
this flaw to set the response timeout for all guest agent messages to zero,
potentially leading to a denial of service. This flaw affects libvirt
versions before 6.2.0.