ALT-PU-2016-2075

Низкий

ALT-PU-2016-2075: package libvirt update to version 2.3.0-alt1

Источник

errata.altlinux.org

Дата публикации

07.10.2016

Дата обновления

07.10.2016

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libvirt to version 2.3.0-alt1.

Устраненные уязвимости1

CVE-2015-5160

Средний 5.5

Дата публикации: 20.08.2018

CWE-200

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

CVSS 3.0

Средний 5.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Низкий 2.1

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2015-5160 https://nvd.nist.gov/vuln/detail/CVE-2015-5160

Ссылки1

ALT-PU-2016-2075 https://errata.altlinux.org/ALT-PU-2016-2075

Связанные уязвимости

CVE-2015-5160

CVSS3: 5.5

ubuntu

около 8 лет назад

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

CVE-2015-5160

CVSS3: 3.3

redhat

около 11 лет назад

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

CVE-2015-5160

CVSS3: 5.5

nvd

около 8 лет назад

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

CVE-2015-5160

CVSS3: 5.5

debian

около 8 лет назад

libvirt before 2.2 includes Ceph credentials on the qemu command line ...

GHSA-57w8-4258-hhvg

CVSS3: 5.5

github

больше 4 лет назад

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.