PT-2011-1126 · Libvirt+1 · Libvirt+1

Petr Matousek · Published 2011-03-15 · Updated 2024-06-15 · CVE-2011-1146

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libvirt versions 0.8.2 through 0.8.8

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via specific API calls, including virNodeDeviceDettach, virNodeDeviceReset, virDomainRevertToSnapshot, virDomainSnapshotDelete, virNodeDeviceReAttach, or virConnectDomainXMLToNative. Exploitation can lead to disruption of confidentiality, integrity, and availability of protected information. The vulnerability can be exploited locally.

Recommendations For libvirt versions 0.8.2 through 0.8.8, consider disabling the virNodeDeviceDettach, virNodeDeviceReset, virDomainRevertToSnapshot, virDomainSnapshotDelete, virNodeDeviceReAttach, and virConnectDomainXMLToNative functions until a patch is available. Restrict access to the libvirt API to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-06819

BDU:2015-06823

BDU:2015-06826

BDU:2015-08725

BDU:2015-08726

BDU:2015-08727

CVE-2011-1146

DSA-2194-1

OPENSUSE-SU-2024:10209-1

RHSA-2011:0391

RHSA-2011_0391

Affected Products

Red Hat

Libvirt

References · 71

• https://osv.dev/vulnerability/CVE-2011-1146 · Vendor Advisory
• http://ubuntu.com/usn/USN-1094-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06819 · Security Note
• http://lists.opensuse.org/opensuse-updates/2011-04/msg00022.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0391.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0391.html · Vendor Advisory
• http://debian.org/security/2011/dsa-2194 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1146 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06826 · Security Note
• http://openwall.com/lists/oss-security/2011/03/10/5 · Patch
• https://bdu.fstec.ru/vul/2015-08725 · Security Note
• https://bdu.fstec.ru/vul/2015-08727 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1146 · Security Note