CVE-2019-3886
CVE-2019-3886
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.
CVSS 5.4 · Media · EPSS 1,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
libvirt
- Versiones
- 4.8.0 and above: Afectada
Sin corrección publicada
libvirt Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.0.0-2
Actualiza a 5.0.0-2
libvirt Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.0.0-2
Actualiza a 5.0.0-2
libvirt Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 5.0.0-2
Actualiza a 5.0.0-2
Fuentes originales
- http://www.securityfocus.com/bid/107777
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html
- https://usn.ubuntu.com/4021-1/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/
- https://access.redhat.com/errata/RHBA-2019:3723
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886
- https://nvd.nist.gov/vuln/detail/CVE-2019-3886