Red Hat Security AdvisoryRHSA-2009:0382
libvirt security update
Released 2009-03-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) libvirt-0.3.3-14.el5_3.1, libvirt-0.3.3-14.el5_3.1.i386, libvirt-devel-0.3.3-14.el5_3.1 +3
- Red Hat Enterprise Linux Virtualization (v. 5 server) libvirt-0.3.3-14.el5_3.1, libvirt-0.3.3-14.el5_3.1.i386, libvirt-0.3.3-14.el5_3.1.ia64 +6
Fixes 2 records
Priority LOW 32
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00383 · Published 2008-12-19 · Fixed
Priority LOW 23
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sen…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.01172 · Published 2009-02-11 · Fixed CWE-119
