CVE-2014-0028 in libvirt

요약 (영어)

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.

예약하다

2013. 12. 03.

공개

2014. 01. 24.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
11999	libvirt ACL domain:gettatr virDomainPtr 권한 상승	264	입증되지 않음	공식 수정	CVE-2014-0028