9.3
Critical
CVE-2020-15708 Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions
Description
Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libvirt 6.0 | earliest → < 6.0.0-0ubuntu8.3 | 6.0.0-0ubuntu8.3 |
References
- usn.ubuntu.com usn.ubuntu.com
Timeline
- Published
- Last modified