Red Hat Security AdvisoryRHSA-2010:0615
libvirt security and bug fix update
Released 2010-08-10 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) libvirt-0.6.3-33.el5_5.3, libvirt-0.6.3-33.el5_5.3.i386, libvirt-devel-0.6.3-33.el5_5.3 +3
- Red Hat Enterprise Linux Virtualization (v. 5 server) libvirt-0.6.3-33.el5_5.3, libvirt-0.6.3-33.el5_5.3.i386, libvirt-0.6.3-33.el5_5.3.ia64 +6
Fixes 2 records
Priority LOW 20
Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors.
CVSS 2.0MEDIUM 4.4· Local · Low privileges · Interaction — · EPSS 0.00325 · Published 2010-08-19 · Partial fix CWE-264
Priority LOW 12
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port va…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00423 · Published 2010-08-19 · Partial fix CWE-264
