Описание
A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 11.6.0-1ubuntu7 |
| esm-infra-legacy/trusty | released | 1.2.2-0ubuntu13.1.28+esm2 |
| esm-infra-legacy/xenial | released | 1.3.1-1ubuntu10.31+esm1 |
| esm-infra/bionic | released | 4.0.0-1ubuntu8.21+esm1 |
| esm-infra/focal | released | 6.0.0-0ubuntu8.20+esm1 |
| esm-infra/xenial | ignored | end of ESM support, was needs-triage |
| jammy | released | 8.0.0-1ubuntu7.15 |
| noble | released | 10.0.0-2ubuntu8.11 |
| plucky | released | 11.0.0-2ubuntu6.5 |
| questing | released | 11.6.0-1ubuntu3.2 |
Показывать по
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
Libvirt: information disclosure via world-readable vm snapshots
A flaw was found in libvirt. External inactive snapshots for shut-down ...
A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.
EPSS
5.5 Medium
CVSS3