PT-2019-2887 · Libvirt+5 · Libvirt+5

Daniel P. Berrangé · Published 2018-04-02 · Updated 2024-06-15 · CVE-2019-10132

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libvirt versions 4.1.0 and later

Description A vulnerability was found in the virtlockd-admin.socket and virtlogd-admin.socket systemd units of libvirt. The issue is caused by a missing SocketMode configuration parameter, which allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons. This could potentially allow an attacker to elevate their privileges.

Recommendations For libvirt versions 4.1.0 and later, consider adding the SocketMode configuration parameter to the virtlockd-admin.socket and virtlogd-admin.socket systemd units to restrict access. As a temporary workaround, consider restricting access to the virtlockd-admin-sock and virtlogd-admin-sock sockets to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-264

CWE-732

Related Identifiers

ALT-PU-2018-1530

ALT-PU-2019-1991

ALT-PU-2019-1995

BDU:2019-02856

CESA-2019_1264

CESA-2019_1268

CVE-2019-10132

MGASA-2019-0390

OPENSUSE-SU-2024:11008-1

RHSA-2019:1264

RHSA-2019:1268

RHSA-2019:1455

RHSA-2019_1264

RHSA-2019_1268

SUSE-SU-2019:1490-1

USN-4021-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Libvirt

References · 91

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1064 · Security Note
• https://access.redhat.com/errata/RHSA-2019:1268 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3886 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-4688.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3886 · Security Note
• https://linux.oracle.com/errata/ELSA-2019-1264.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1490-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-10132 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:1264 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0390 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10132 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-10132 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12130 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10132 · Vendor Advisory