Поиск уязвимостей
Количество 16
Количество 16
GHSA-r329-fjhj-3cw3
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process ...
RLSA-2026:75583
Important: libvirt security, bug fix, and enhancement update
RLSA-2026:74424
Important: libvirt security, bug fix, and enhancement update
ELSA-2026-75583
ELSA-2026-75583: libvirt security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-74424
ELSA-2026-74424: libvirt security, bug fix, and enhancement update (IMPORTANT)
ALT-PU-2026-13014
ALT-PU-2026-13014: package `libvirt` update to version 12.6.0-alt2
openSUSE-SU-2026:21738-1
Security update for libvirt
SUSE-SU-2026:4141-1
Security update for libvirt
SUSE-SU-2026:4010-1
Security update for libvirt
SUSE-SU-2026:4009-1
Security update for libvirt
SUSE-SU-2026:4004-1
Security update for libvirt
SUSE-SU-2026:3939-1
Security update for libvirt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-r329-fjhj-3cw3 A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-63622 A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-63622 A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-63622 A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-63622 A flaw was found in libvirt. A local attacker, specifically a process ... | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | RLSA-2026:75583 Important: libvirt security, bug fix, and enhancement update | около 1 месяца назад | ||
| RLSA-2026:74424 Important: libvirt security, bug fix, and enhancement update | около 1 месяца назад | ||
| ELSA-2026-75583 ELSA-2026-75583: libvirt security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-74424 ELSA-2026-74424: libvirt security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | ||
| ALT-PU-2026-13014 ALT-PU-2026-13014: package `libvirt` update to version 12.6.0-alt2 | CVSS3: 7.8 | 3 месяца назад | |
 | openSUSE-SU-2026:21738-1 Security update for libvirt | 2 месяца назад | ||
| SUSE-SU-2026:4141-1 Security update for libvirt | около 2 месяцев назад | ||
| SUSE-SU-2026:4010-1 Security update for libvirt | 2 месяца назад | ||
| SUSE-SU-2026:4009-1 Security update for libvirt | 2 месяца назад | ||
| SUSE-SU-2026:4004-1 Security update for libvirt | 2 месяца назад | ||
| SUSE-SU-2026:3939-1 Security update for libvirt | 2 месяца назад |
Уязвимостей на страницу