Debian/libvirt: high 7.8
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with
Action: Upgrade libvirt to 5.0.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0-4 | - |
Fixed versions
| 5.0.0-4 |
Sources
- osv: DEBIAN-CVE-2019-10161#Debian:14/libvirt
- https://security-tracker.debian.org/tracker/CVE-2019-10161
published · modified · JSON