libvirt vulnerability

2013-11-1100:00:00

ubuntu.com

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

8.8

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON

Releases

Ubuntu 13.10

Packages

libvirt - Libvirt virtualization toolkit

Details

It was discovered that libvirt incorrectly checked privileges when the
virConnectDomainXMLToNative API function was used. An attacker could
possibly use this flaw to gain write privileges, contrary to expected
behaviour.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchlibvirt0< 1.1.1-0ubuntu8.1UNKNOWN
Ubuntu13.10noarchlibvirt-bin< 1.1.1-0ubuntu8.1UNKNOWN
Ubuntu13.10noarchlibvirt-dev< 1.1.1-0ubuntu8.1UNKNOWN
Ubuntu13.10noarchlibvirt0-dbg< 1.1.1-0ubuntu8.1UNKNOWN
Ubuntu13.10noarchpython-libvirt< 1.1.1-0ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	libvirt0	< 1.1.1-0ubuntu8.1	UNKNOWN
Ubuntu	13.10	noarch	libvirt-bin	< 1.1.1-0ubuntu8.1	UNKNOWN
Ubuntu	13.10	noarch	libvirt-dev	< 1.1.1-0ubuntu8.1	UNKNOWN
Ubuntu	13.10	noarch	libvirt0-dbg	< 1.1.1-0ubuntu8.1	UNKNOWN
Ubuntu	13.10	noarch	python-libvirt	< 1.1.1-0ubuntu8.1	UNKNOWN