CVE-2022-0897

2022-03-2500:00:00

CWE-667

redhat

github.com

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

JSON

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt’s API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "libvirt",
    "versions": [
      {
        "version": "libvirt 8.0.0-8",
        "status": "affected"
      }
    ]
  }
]