Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3886

Опубликовано: 04 апр. 2019
Источник: nvd
CVSS3: 5.4
CVSS3: 5.4
CVSS2: 4.8
EPSS Низкий

Описание

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
Версия от 4.8.0 (включая) до 5.3.0 (исключая)
Конфигурация 2
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.01108
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

4.8 Medium

CVSS2

Дефекты

CWE-862
CWE-862

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

CVSS3: 5.4
redhat
больше 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

CVSS3: 5.4
msrc
почти 6 лет назад

Описание отсутствует

CVSS3: 5.4
debian
больше 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and abo ...

suse-cvrf
около 7 лет назад

Security update for libvirt

EPSS

Процентиль: 63%
0.01108
Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

4.8 Medium

CVSS2

Дефекты

CWE-862
CWE-862