CVE-2011-4600 in libvirt

Résumé (Anglaise)

The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.

Réserver

28/11/2011

Divulgation

14/04/2016

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
82386	libvirt DNS/DHCP Query bridge_driver.c networkReloadIptablesRules élévation de privilèges	284	Non défini	Correctif officiel	CVE-2011-4600