PT-2017-4106 · Red Hat+3 · Libvirt+3

Publicado 2017-10-05 · Atualizado 2024-06-15 · CVE-2017-1000256

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libvirt versions 2.3.0 and later

Description The issue is related to errors in the certificate authentication procedure in the Libvirt virtualization management library. Exploitation of this issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The problem is caused by a bad default configuration where "verify-peer=no" is passed to QEMU by libvirt, resulting in a failure to validate SSL/TLS certificates by default.

Recommendations For libvirt versions 2.3.0 and later, change the default configuration to "verify-peer=yes" to ensure validation of SSL/TLS certificates.

Exploit

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

ALT-PU-2017-2546

ALT-PU-2017-2777

ALT-PU-2018-2448

BDU:2021-03338

CVE-2017-1000256

DSA-4003-1

MGASA-2018-0153

OPENSUSE-SU-2024:11008-1

SUSE-SU-2017:2850-1

SUSE-SU-2017_2850-1

USN-3576-1

Produtos afetados

Alt Linux

Suse

Ubuntu

Libvirt

Referências · 77

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• https://github.com/mathse/meltdown-spectre-bios-list · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2017-1000256 · Nota
• https://bugzilla.suse.com/1062620 · Nota
• https://osv.dev/vulnerability/DSA-4003-1 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2017-1000256 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000256 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2017-1000256 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-1000256 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/libvirt · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-25637 · Nota
• https://advisories.mageia.org/MGASA-2018-0153.html · Nota de Segurança
• https://security-tracker.debian.org/tracker/DSA-4003-1 · Aviso do Fabricante
• https://listman.redhat.com/archives/libvirt-announce/2017-October/msg00001.html · Nota