Описание
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 4.0.0-1ubuntu8.9 |
| cosmic | released | 4.6.0-2ubuntu3.7 |
| devel | released | 5.4.0-0ubuntu1 |
| disco | released | 5.0.0-1ubuntu2.3 |
| esm-infra-legacy/trusty | not-affected | |
| esm-infra/bionic | not-affected | 4.0.0-1ubuntu8.9 |
| esm-infra/xenial | not-affected | 1.3.1-1ubuntu10.25 |
| precise/esm | not-affected | |
| trusty/esm | not-affected | |
| upstream | needs-triage |
Показывать по
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.s ...
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3