Ubuntu.comUB:CVE-2021-3631CVE-2021-3631
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
0.0005 Low
EPSS
Percentile
16.5%
A flaw was found in libvirt while it generates SELinux MCS category pairs
for VMs’ dynamic labels. This flaw allows one exploited guest to access
files labeled for another guest, resulting in the breaking out of sVirt
confinement. The highest threat from this vulnerability is to
confidentiality and integrity.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libvirt | < 4.0.0-1ubuntu8.21 | UNKNOWN |
| ubuntu | 20.04 | noarch | libvirt | < 6.0.0-0ubuntu8.16 | UNKNOWN |
| ubuntu | 22.04 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 22.10 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 23.04 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 23.10 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 14.04 | noarch | libvirt | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libvirt | < any | UNKNOWN |
Related
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
0.0005 Low
EPSS
Percentile
16.5%