Published: 15/04/2014 Updated: 13/02/2023

CVSS v2 Base Score: 5.8 | Impact Score: 7.8 | Exploitability Score: 4.4

VMScore: 516

Vector: AV:A/AC:M/Au:S/C:N/I:P/A:C

The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 up to and including 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat libvirt 1.0.5.4
redhat libvirt 1.0.5.3
redhat libvirt 1.0.5
redhat libvirt 1.0.5.6
redhat libvirt 1.0.4
redhat libvirt 1.2.0
redhat libvirt 1.0.1
redhat libvirt 1.2.1
redhat libvirt 1.1.2
redhat libvirt 1.1.4
redhat libvirt 1.0.6
redhat libvirt 1.0.2
redhat libvirt 1.1.1
redhat libvirt 1.0.5.1
fedoraproject fedora 20
redhat libvirt 1.0.5.2
redhat libvirt 1.0.3
redhat libvirt 1.0.5.5
redhat libvirt 1.1.0
redhat libvirt 1.1.3

Debian Bug report logs - #732394 libvirt-bin: CVE-2013-6456: virsh shutdown does not handle symlinks correctly for LXC Package: libvirt-bin; Maintainer for libvirt-bin is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Source for libvirt-bin is src:libvirt (PTS, buildd, popcon) Reported by: Reco ...

Several security issues were fixed in libvirt ...

The LXC driver (lxc/lxc_driverc) in libvirt 101 through 121 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service ( ...

CWE-59 http://security.libvirt.org/2013/0018.html https://bugzilla.redhat.com/show_bug.cgi?id=1045643 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129199.html http://libvirt.org/news.html http://secunia.com/advisories/56187 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394 http://secunia.com/advisories/56215 http://www.securityfocus.com/bid/65743 http://lists.opensuse.org/opensuse-updates/2014-05/msg00004.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=5fc590ad9f4 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394 https://usn.ubuntu.com/2209-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-6456

CVE-2013-6456

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect