PT-2011-5005 · Libvirt+1 · Libvirt+1

Published 2011-12-31 · Updated 2024-06-15 · CVE-2011-4600

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 0.9.9

Description The issue is related to the networkReloadIptablesRules function in libvirt, which does not properly handle firewall rules on bridge networks when libvirtd is restarted. This might allow remote attackers to bypass intended access restrictions via a DNS or DHCP query.

Recommendations For versions prior to 0.9.9, update to version 0.9.9 or later to resolve the issue. As a temporary workaround, consider restricting access to bridge networks to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2011-4600

OPENSUSE-SU-2024:10209-1

USN-2867-1

Affected Products

Ubuntu

Libvirt

References · 56

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5313 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-4600 · Security Note
• https://ubuntu.com/security/CVE-2015-5247 · Vendor Advisory
• https://ubuntu.com/security/CVE-2011-4600 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01128 · Security Note
• https://osv.dev/vulnerability/USN-2867-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-4600 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-4600 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2867-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4600 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8136 · Security Note
• http://libvirt.org/news-2012.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5313 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8136 · Vendor Advisory