Ubuntu.comUB:CVE-2021-3631CVE-2021-3631
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
26.8%
A flaw was found in libvirt while it generates SELinux MCS category pairs
for VMs’ dynamic labels. This flaw allows one exploited guest to access
files labeled for another guest, resulting in the breaking out of sVirt
confinement. The highest threat from this vulnerability is to
confidentiality and integrity.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libvirt | < 4.0.0-1ubuntu8.21 | UNKNOWN |
| ubuntu | 20.04 | noarch | libvirt | < 6.0.0-0ubuntu8.16 | UNKNOWN |
| ubuntu | 22.04 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 22.10 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 23.04 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 23.10 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 24.04 | noarch | libvirt | < 7.6.0-0ubuntu3 | UNKNOWN |
| ubuntu | 14.04 | noarch | libvirt | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libvirt | < any | UNKNOWN |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
26.8%