PT-2008-6233 · Libvirt+1 · Libvirt+1

Daniel Berrange + 1 · Publicado 2008-12-19 · Atualizado 2024-06-15 · CVE-2008-5086

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libvirt versions 0.3.2 through 0.5.1

Description The issue allows local users to bypass intended access restrictions and perform administrative actions due to multiple methods in libvirt not checking if a connection is read-only.

Recommendations For libvirt versions 0.3.2 through 0.5.1, consider restricting access to administrative actions until a patch is available. As a temporary workaround, review and enforce connection permissions to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2008-5086

OPENSUSE-SU-2024:11008-1

RHSA-2009:0382

RHSA-2009_0382

Produtos afetados

Red Hat

Libvirt

Referências · 46

• https://suse.com/security/cve/CVE-2020-25637 · Nota
• https://suse.com/security/cve/CVE-2018-3639 · Nota
• https://redhat.com/archives/libvir-list/2009-January/msg00726.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-5086 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-1064 · Nota
• http://secunia.com/advisories/33217 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-694-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-14339 · Nota
• https://access.redhat.com/security/cve/CVE-2009-0036 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Aviso do Fabricante
• http://git.et.redhat.com/?p=libvirt.git;a=commitdiff;h=2bb0657e28 · Nota
• https://redhat.com/archives/libvir-list/2009-January/msg00699.html · Nota
• http://securityfocus.com/bid/32905 · Correção
• http://secunia.com/advisories/33198 · Nota
• https://suse.com/security/cve/CVE-2019-11135 · Nota