PT-2019-2887 · Libvirt+5 · Libvirt+5

Daniel P. Berrangé · Publicado 2018-04-02 · Atualizado 2024-06-15 · CVE-2019-10132

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libvirt versions 4.1.0 and later

Description A vulnerability was found in the virtlockd-admin.socket and virtlogd-admin.socket systemd units of libvirt. The issue is caused by a missing SocketMode configuration parameter, which allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons. This could potentially allow an attacker to elevate their privileges.

Recommendations For libvirt versions 4.1.0 and later, consider adding the SocketMode configuration parameter to the virtlockd-admin.socket and virtlogd-admin.socket systemd units to restrict access. As a temporary workaround, consider restricting access to the virtlockd-admin-sock and virtlogd-admin-sock sockets to minimize the risk of exploitation.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-264

CWE-732

Identificadores relacionados

ALT-PU-2018-1530

ALT-PU-2019-1991

ALT-PU-2019-1995

BDU:2019-02856

CESA-2019_1264

CESA-2019_1268

CVE-2019-10132

MGASA-2019-0390

OPENSUSE-SU-2024:11008-1

RHSA-2019:1264

RHSA-2019:1268

RHSA-2019:1455

RHSA-2019_1264

RHSA-2019_1268

SUSE-SU-2019:1490-1

USN-4021-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libvirt

Referências · 91

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1064 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2019:1268 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5 · Nota
• https://ubuntu.com/security/CVE-2019-3886 · Aviso do Fabricante
• https://lists.centos.org/pipermail/centos-announce/2019-May/035357.html · Nota
• https://access.redhat.com/security/cve/cve-2019-10132 · Nota
• https://linux.oracle.com/errata/ELSA-2019-4688.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3886 · Nota de Segurança
• https://linux.oracle.com/errata/ELSA-2019-1264.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2019:1490-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-10132 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:1264 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2019-0390 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-10132 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2 · Aviso do Fabricante