Non notée
CVE-2022-0897 A flaw was found in the libvirt nwfilter driver
Description
A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libvirt | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- GLSA-202210-06 security.gentoo.org
- [debian-lts-announce] 20240401 [SECURITY] [DLA 3778-1] libvirt security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de libvirt
Les 11 CVE de libvirt →
CVE-2023-2700
A vulnerability was found in libvirt
5.5
Moyenne
CVE-2021-3975
A use-after-free flaw was found in libvirt
Non notée
CVE-2021-4147
A flaw was found in the libvirt libxl driver
Non notée
CVE-2021-3631
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels
Non notée