PT-2013-3379 · Libvirt · Libvirt

Bastian Blank · Publicado 2013-03-20 · Atualizado 2013-03-21 · CVE-2013-1766

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions libvirt versions 1.0.2 and earlier

Description The issue allows local users to write to device files via unspecified vectors, as the group owner is set to kvm for these files.

Recommendations For libvirt versions 1.0.2 and earlier, update to a version later than 1.0.2 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1766

DSA-2650-1

Produtos afetados

Libvirt

Referências · 7

• http://secunia.com/advisories/52628 · Aviso do Fabricante
• http://securityfocus.com/bid/58178 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1766 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1766 · Nota de Segurança
• http://debian.org/security/2013/dsa-2650 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2013-1766 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-1766 · Aviso do Fabricante