Количество 11
Количество 11
GHSA-wmhq-5pq5-8474
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user.
CVE-2026-77159
Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepare ...
openSUSE-SU-2026:21738-1
Security update for libvirt
SUSE-SU-2026:4010-1
Security update for libvirt
SUSE-SU-2026:4009-1
Security update for libvirt
SUSE-SU-2026:4004-1
Security update for libvirt
SUSE-SU-2026:3939-1
Security update for libvirt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-wmhq-5pq5-8474 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user. | CVSS3: 5.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user. | CVSS3: 5.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user. | CVSS3: 5.5 | 0% Низкий | 7 дней назад |
 | CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic links. A local attacker with access to the swtpm account can replace the logfile with a symlink, causing libvirtd (running as root) to transfer ownership of an arbitrary file to the swtpm user. | CVSS3: 5.5 | 0% Низкий | 6 дней назад |
 | CVE-2026-77159 Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink | 0% Низкий | около 19 часов назад | |
| CVE-2026-77159 A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepare ... | CVSS3: 5.5 | 0% Низкий | 6 дней назад |
 | openSUSE-SU-2026:21738-1 Security update for libvirt | 15 дней назад | ||
| SUSE-SU-2026:4010-1 Security update for libvirt | 11 дней назад | ||
| SUSE-SU-2026:4009-1 Security update for libvirt | 11 дней назад | ||
| SUSE-SU-2026:4004-1 Security update for libvirt | 11 дней назад | ||
| SUSE-SU-2026:3939-1 Security update for libvirt | 15 дней назад |
Уязвимостей на страницу