Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-3886

Опубликовано: 03 апр. 2019
Источник: redhat
CVSS3: 5.4
EPSS Низкий

Описание

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libvirtNot affected
Red Hat Enterprise Linux 6libvirtNot affected
Red Hat Enterprise Linux 7libvirtNot affected
Red Hat Enterprise Linux 8virt:rhel/libvirtNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.0.0/libvirtAffected
Red Hat Storage 3libvirtNot affected
Red Hat Virtualization 4libvirtNot affected
Advanced Virtualization for RHEL 8.1.0virtFixedRHBA-2019:372306.11.2019
Advanced Virtualization for RHEL 8.1.0virt-develFixedRHBA-2019:372306.11.2019

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-862
https://bugzilla.redhat.com/show_bug.cgi?id=1694880libvirt: virsh domhostname command discloses guest hostname in readonly mode

EPSS

Процентиль: 66%
0.00515
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

CVSS3: 5.4
nvd
почти 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

CVSS3: 5.4
msrc
больше 5 лет назад

Описание отсутствует

CVSS3: 5.4
debian
почти 7 лет назад

An incorrect permissions check was discovered in libvirt 4.8.0 and abo ...

suse-cvrf
больше 6 лет назад

Security update for libvirt

EPSS

Процентиль: 66%
0.00515
Низкий

5.4 Medium

CVSS3