p PatchFirst

CVE-2013-4291

CVE-2013-4291

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges.

EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libvirt Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.2-2

    Update to 1.1.2-2

  • libvirt Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.2-2

    Update to 1.1.2-2

  • libvirt Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.2-2

    Update to 1.1.2-2

Original sources

Check your server →