Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-4147

Опубликовано: 29 нояб. 2021
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

Отчет

The versions of libvirt as shipped with Red Hat Enterprise Linux do not support the libxl hypervisor driver for Xen. Therefore, Red Hat Enterprise Linux is not affected by this flaw.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6libvirtNot affected
Red Hat Enterprise Linux 7libvirtNot affected
Red Hat Enterprise Linux 8virt:rhel/libvirtNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:8.2/libvirtNot affected
Red Hat Enterprise Linux 8 Advanced Virtualizationvirt:av/libvirtNot affected
Red Hat Enterprise Linux 9libvirtNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-667
https://bugzilla.redhat.com/show_bug.cgi?id=2034195libvirt: deadlock and crash in libxl driver

EPSS

Процентиль: 15%
0.0005
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

CVSS3: 6.5
nvd
больше 3 лет назад

A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

CVSS3: 6.5
debian
больше 3 лет назад

A flaw was found in the libvirt libxl driver. A malicious guest could ...

suse-cvrf
больше 3 лет назад

Security update for libvirt

suse-cvrf
больше 3 лет назад

Security update for libvirt

EPSS

Процентиль: 15%
0.0005
Низкий

6.5 Medium

CVSS3