CVE-2019-10166

HIGH

7.8

Description

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published8/2/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

redhat:enterprise_linuxredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_server_ausredhat:enterprise_linux_server_eusredhat:enterprise_linux_server_tusredhat:enterprise_linux_workstationredhat:libvirtredhat:virtualization

Weaknesses (CWE)

CWE-284

References

https://access.redhat.com/libvirt-privesc-vulnerabilities(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10166(secalert@redhat.com)

https://security.gentoo.org/glsa/202003-18(secalert@redhat.com)

https://access.redhat.com/libvirt-privesc-vulnerabilities(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10166(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202003-18(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.