PT-2020-6393 · Libvirt+1 · Libvirt+1

Marian Rehak · Published 2020-03-20 · Updated 2024-06-15 · CVE-2020-10701

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 6.2.0

Description A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This flaw allows read-only connections to adjust the time that libvirt waits for the QEMU guest agent to respond to agent commands. Depending on the timeout value that is set, this flaw can make guest agent commands fail because the agent cannot respond in time. Unprivileged users with a read-only connection could abuse this flaw to set the response timeout for all guest agent messages to zero, potentially leading to a denial of service.

Recommendations For libvirt versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the libvirt API to prevent unprivileged users from adjusting the QEMU agent response timeout. Additionally, monitor guest agent commands for potential failures due to timeout issues.

Fix

DoS

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ALT-PU-2020-1681

ALT-PU-2021-1690

ALT-PU-2021-1965

AZL-6657

BDU:2021-04592

CVE-2020-10701

OPENSUSE-SU-2024:11008-1

Affected Products

Alt Linux

Libvirt

References · 34

• https://security-tracker.debian.org/tracker/CVE-2020-10701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10701 · Security Note
• https://osv.dev/vulnerability/AZL-6657 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10701 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04592 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1819163 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10701 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11008-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-3631 · Note
• https://libvirt.org/git/?p=libvirt.git;a=commit;h=4cc90c2e62df653e909ad31fd810224bf8bcf913 · Note
• https://security.netapp.com/advisory/ntap-20210708-0001 · Note
• https://t.me/cvenotify/15801 · Telegram Post
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5 · Note
• https://suse.com/security/cve/CVE-2019-10168 · Note
• https://suse.com/security/cve/CVE-2017-2635 · Note