PT-2018-19255 · Libvirt · Virsh

Published 2018-01-01 · Updated 2018-01-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions virsh (affected versions not specified)

Description The issue allows the hostname to be crafted maliciously with ssh arguments in virsh, which would then be passed to ssh.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0017

Affected Products

Virsh

References · 4

• https://advisories.mageia.org/MGASA-2018-0017.html · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0017 · Vendor Advisory
• https://lists.opensuse.org/opensuse-updates/2017-10/msg00018.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=21826 · Note