Vulnerability Description
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Libvirt | < 4.10.1 |
| Redhat | Enterprise Linux | 6.0 |
| Redhat | Virtualization | 4.0 |
| Redhat | Virtualization Host | 4.0 |
| Canonical | Ubuntu Linux | 14.04 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/libvirt-privesc-vulnerabilitiesThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10161Issue TrackingPatchThird Party Advisory
- https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=aed6a032cead4386472afb24b1
- https://security.gentoo.org/glsa/202003-18Third Party Advisory
- https://usn.ubuntu.com/4047-2/Third Party Advisory
- https://access.redhat.com/libvirt-privesc-vulnerabilitiesThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10161Issue TrackingPatchThird Party Advisory
- https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=aed6a032cead4386472afb24b1
- https://security.gentoo.org/glsa/202003-18Third Party Advisory
- https://usn.ubuntu.com/4047-2/Third Party Advisory
FAQ
What is CVE-2019-10161?
CVE-2019-10161 is a vulnerability with a CVSS score of 7.8 (HIGH). It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with...
How severe is CVE-2019-10161?
CVE-2019-10161 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-10161?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Libvirt, Redhat Enterprise Linux, Redhat Virtualization, Redhat Virtualization Host, Canonical Ubuntu Linux.