Skip to content
Not rated

CVE-2021-3559 A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0

Description

A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability.

Affected products and versions

Product Affected versions Fixed in
libvirt Versions not published

References

Timeline

  1. Published
  2. Last modified
The 11 CVEs of libvirt →
Track this CVE