p PatchFirst

CVE-2019-10132

CVE-2019-10132

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.

CVSS 8.8 · High · EPSS 1.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libvirt

    Versions
    • affects >= 4.1.0: Affected

    No fix published

  • libvirt Debian:12

    Affected ranges
    • ECOSYSTEM: < 5.0.0-3

    Update to 5.0.0-3

  • libvirt Debian:13

    Affected ranges
    • ECOSYSTEM: < 5.0.0-3

    Update to 5.0.0-3

  • libvirt Debian:14

    Affected ranges
    • ECOSYSTEM: < 5.0.0-3

    Update to 5.0.0-3

Original sources

Check your server →