Skip to content
Sign in
6.4 Medium

CVE-2019-3831 A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8

Description

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Affected products and versions

Product Affected versions Fixed in
vdsm 4.30.9 No fix stated

Other CVEs of vdsm

The 2 CVEs of vdsm →
CVE-2018-10908 It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources 6.5 Medium
Track this CVE