PT-2014-3125 · Red Hat+2 · Libvirt+2
Eric Blake
+1
·
Publicado
2014-03-05
·
Atualizado
2024-06-15
·
CVE-2013-6456
CVSS v2.0
5.8
Média
| Vetor | AV:A/AC:M/Au:S/C:N/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
libvirt versions 1.0.1 through 1.2.1
Description
The issue allows local users to delete arbitrary host devices via the "virDomainDeviceDettach" API and a symlink attack on "/dev" in the container. It also enables users to create arbitrary nodes via the "virDomainDeviceAttach" API and a symlink attack on "/dev" in the container. Furthermore, it can cause a denial of service, such as shutting down or rebooting the host OS, via the "virDomainShutdown" or "virDomainReboot" API and a symlink attack on "/dev/initctl" in the container. This is related to paths under "/proc/$PID/root" and the
virInitctlSetRunLevel function.Recommendations
For libvirt versions 1.0.1 through 1.2.1, consider disabling the
virDomainDeviceDettach and virDomainDeviceAttach APIs as a temporary workaround to prevent arbitrary device deletion and node creation. Additionally, restrict access to the virDomainShutdown and virDomainReboot APIs to minimize the risk of denial of service attacks. Avoid using the virInitctlSetRunLevel function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Libvirt