CVE-2019-10161
High
Description
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Redhat Libvirt
PublishedJul 30, 2019
First seenJul 30, 2019
Weakness typeCWE-284Improper access control
How to fix
Update
- redhat libvirt4.10.1, 5.4.1 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat libvirt | v < 4.10.1, 5.0.0 ≤ v < 5.4.1 | 4.10.1, 5.4.1 |
| redhat enterprise_linux | 6.0, 7.0, 8.0 | — |
| redhat virtualization | 4.0 | — |
| redhat virtualization_host | 4.0 | — |
| canonical ubuntu_linux | 14.04 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.