9.3
Critique
CVE-2020-15708 Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions
Description
Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libvirt 6.0 | premières → < 6.0.0-0ubuntu8.3 | 6.0.0-0ubuntu8.3 |
Références
- usn.ubuntu.com usn.ubuntu.com
Chronologie
- Publiée
- Dernière modification