Privilege Escalation

2020-04-1000:30:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

JSON

libvirt is vulnerable to privilege escalation. The vulnerability exists as the libvirtd daemon was discovered to not properly check user connection permissions before performing certain privileged actions, such as requesting migration of an unprivileged guest domain to another system. A local user able to establish a read-only connection to libvirtd could use this flaw to perform actions that should be restricted to read-write connections.

CPENameOperatorVersion
libvirteq0.1.8__15.el5
libvirteq0.2.3__9.el5
libvirteq0.2.3__9.el5_1.1
libvirteq0.3.3__7.el5
libvirteq0.1.8__15.el5
libvirteq0.2.3__9.el5
libvirteq0.2.3__9.el5_1.1
libvirteq0.3.3__7.el5

Name	Operator	Version
libvirt	eq	0.1.8__15.el5
libvirt	eq	0.2.3__9.el5
libvirt	eq	0.2.3__9.el5_1.1
libvirt	eq	0.3.3__7.el5
libvirt	eq	0.1.8__15.el5
libvirt	eq	0.2.3__9.el5
libvirt	eq	0.2.3__9.el5_1.1
libvirt	eq	0.3.3__7.el5