libvirtd up to 4.10.0/5.4.0 API virDomainSaveImageGetXMLDesc access control
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.2 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, has been found in libvirtd up to 4.10.0/5.4.0 (Virtualization Software). Affected by this issue is the function virDomainSaveImageGetXMLDesc
of the component API. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. CVE summarizes:
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
The weakness was shared 07/30/2019 (Website). The advisory is available at access.redhat.com. This vulnerability is handled as CVE-2019-10161 since 03/27/2019. The exploitation is known to be easy. Local access is required to approach this attack. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.
Upgrading to version 4.10.1 or 5.4.1 eliminates this vulnerability.
The entries 139364, 139365 and 139366 are related to this item.
Product
Type
Name
Version
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.3VulDB Meta Temp Score: 7.2
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 7.8
NVD Vector: 🔍
CNA Base Score: 8.8
CNA Vector (Red Hat, Inc.): 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Access controlCWE: CWE-284 / CWE-266
CAPEC: 🔍
ATT&CK: 🔍
Local: Yes
Remote: No
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: libvirtd 4.10.1/5.4.1
Patch: aed6a032cead4386472afb24b16196579e239580
Timeline
03/27/2019 🔍07/30/2019 🔍
07/31/2019 🔍
11/14/2023 🔍
Sources
Advisory: USN-4047-2Status: Not defined
Confirmation: 🔍
CVE: CVE-2019-10161 (🔍)
See also: 🔍
Entry
Created: 07/31/2019 09:52Updated: 11/14/2023 11:36
Changes: 07/31/2019 09:52 (59), 07/16/2020 10:34 (1), 11/14/2023 11:29 (6), 11/14/2023 11:36 (12)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.