Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37fp-qc5g-vpxr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

EPSS

Процентиль: 11%
0.00038
Низкий

7.8 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 7 лет назад

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

CVSS3: 5
redhat
почти 8 лет назад

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

CVSS3: 7.8
nvd
больше 7 лет назад

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

CVSS3: 7.8
debian
больше 7 лет назад

util/virlog.c in libvirt does not properly determine the hostname on L ...

oracle-oval
около 7 лет назад

ELSA-2018-3113: libvirt security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 11%
0.00038
Низкий

7.8 High

CVSS3

Дефекты

CWE-346