Unrated
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuratio...
CVE-2019-10132
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-10132 libvirt Fixed in: 5.0.0-3
Original description The description as published by the source.
A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory security.libvirt.org
- patch bugzilla.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web usn.ubuntu.com