PT-2018-19255 · Libvirt · Virsh

Publicado 2018-01-01 · Atualizado 2018-01-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions virsh (affected versions not specified)

Description The issue allows the hostname to be crafted maliciously with ssh arguments in virsh, which would then be passed to ssh.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2018-0017

Produtos afetados

Virsh

Referências · 4

• https://lists.opensuse.org/opensuse-updates/2017-10/msg00018.html · Nota
• https://advisories.mageia.org/MGASA-2018-0017.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=21826 · Nota
• https://osv.dev/vulnerability/MGASA-2018-0017 · Aviso do Fabricante