Privilege Escalation in libvirt Package
Summary
CVE-2020-14339: A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. Affects libvirt across 2 version ranges.
< 6.6.0-r0
>= 07bb8ff4dd0ca0224754c582390f4a873597c4b9, < 88f45e72688cec14eb58bbdb120336bbaa36a1fc
Fixed in 6.6.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libvirt package is a library that provides a high-level API for managing virtualization technologies, such as KVM, QEMU, Xen, and LXC. It allows users to create, configure, and control virtual machines and containers. This vulnerability affects the libvirt package in the Alpine Linux v3.12 ecosystem.
Vulnerability Detail
A flaw was discovered in libvirt that results in a file descriptor leak for the /dev/mapper/control device into the QEMU process. This leaked file descriptor enables privileged operations on the host's device-mapper. Exploiting this vulnerability, a malicious guest user or process can perform actions beyond their authorized permissions, potentially causing severe damage to the host operating system. The vulnerability's CVSS score is 8.8, indicating a high severity level with potential impacts on confidentiality, integrity, and system availability.
How To Fix
Minimum fixed version
6.6.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade libvirtTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround available for this vulnerability at the moment.
Conclusion
The libvirt package in the Alpine Linux v3.12 ecosystem is vulnerable to a privilege escalation flaw. It is crucial to update the package to version 6.6.0-r0 or later to mitigate the risk. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libvirt →
FAQ
Libvirt is a library that provides a high-level API for managing virtualization technologies, allowing users to create, configure, and control virtual machines and containers.
This vulnerability allows a malicious guest user or process to perform privileged operations on the host's device-mapper, potentially causing serious damage to the host operating system.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
To fix this vulnerability, update the libvirt package to version 6.6.0-r0 or later using the package manager of your Linux distribution.
No, there is currently no known workaround for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for libvirt.
