PT-2017-4106 · Red Hat+3 · Libvirt+3

Published 2017-10-05 · Updated 2024-06-15 · CVE-2017-1000256

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libvirt versions 2.3.0 and later

Description The issue is related to errors in the certificate authentication procedure in the Libvirt virtualization management library. Exploitation of this issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The problem is caused by a bad default configuration where "verify-peer=no" is passed to QEMU by libvirt, resulting in a failure to validate SSL/TLS certificates by default.

Recommendations For libvirt versions 2.3.0 and later, change the default configuration to "verify-peer=yes" to ensure validation of SSL/TLS certificates.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALT-PU-2017-2546

ALT-PU-2017-2777

ALT-PU-2018-2448

BDU:2021-03338

CVE-2017-1000256

DSA-4003-1

MGASA-2018-0153

OPENSUSE-SU-2024:11008-1

SUSE-SU-2017:2850-1

SUSE-SU-2017_2850-1

USN-3576-1

Affected Products

Alt Linux

Suse

Ubuntu

Libvirt

References · 77

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• https://osv.dev/vulnerability/DSA-4003-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000256 · Security Note
• https://access.redhat.com/security/cve/CVE-2017-1000256 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-1000256 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/libvirt · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0153.html · Security Note
• https://security-tracker.debian.org/tracker/DSA-4003-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1000256 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5748 · Security Note
• https://bdu.fstec.ru/vul/2018-01492 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5008 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-1000256 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16 · Vendor Advisory