Advisory ROSA-SA-2021-1899

Software: libvirt 4.5.0
OS: Cobalt 7.9

CVE-ID: CVE-2020-25637
CVE-Crit: MEDIUM
CVE-DESC: A double free memory issue has been detected in libvirt APIs in versions prior to 6.8.0 responsible for querying information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. In particular, clients connecting to a read/write socket with limited ACL permissions could exploit this vulnerability to crash the libvirt daemon, resulting in a denial of service or potentially escalating their privileges on the system. The greatest threat from this vulnerability is to data confidentiality and integrity, as well as system availability.
CVE-STATUS: default
CVE-REV: Default