Not rated
CVE-2022-0897 A flaw was found in the libvirt nwfilter driver
Description
A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libvirt | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- GLSA-202210-06 security.gentoo.org
- [debian-lts-announce] 20240401 [SECURITY] [DLA 3778-1] libvirt security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of libvirt
The 11 CVEs of libvirt →
CVE-2023-2700
A vulnerability was found in libvirt
5.5
Medium
CVE-2021-3975
A use-after-free flaw was found in libvirt
Not rated
CVE-2021-4147
A flaw was found in the libvirt libxl driver
Not rated
CVE-2021-3631
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels
Not rated