Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3631

Опубликовано: 02 мар. 2022
Источник: nvd
CVSS3: 6.3
CVSS2: 3.3
EPSS Низкий

Описание

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
Версия до 7.5.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:openshift_container_platform:4.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
Конфигурация 3
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

EPSS

Процентиль: 11%
0.00039
Низкий

6.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-732
CWE-732

Связанные уязвимости

CVSS3: 6.3
ubuntu
больше 3 лет назад

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 3
redhat
около 4 лет назад

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS3: 6.3
msrc
больше 3 лет назад

Описание отсутствует

CVSS3: 6.3
debian
больше 3 лет назад

A flaw was found in libvirt while it generates SELinux MCS category pa ...

suse-cvrf
почти 4 года назад

Security update for libvirt

EPSS

Процентиль: 11%
0.00039
Низкий

6.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-732
CWE-732