CVE-2020-25637HIGH
Description
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
References
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00072.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00073.html
Details
Source: MITRE
Published: 2020-10-06
Updated: 2020-12-04
Type: CWE-415
Risk Information
CVSS v2.0
Base Score: 7.2
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.9
Severity: HIGH
CVSS v3.0
Base Score: 6.7
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 0.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 147678 | EulerOS Virtualization 2.9.0 : libvirt (EulerOS-SA-2021-1666) | Nessus | Huawei Local Security Checks | high |
| 147562 | EulerOS Virtualization 3.0.6.6 : libvirt (EulerOS-SA-2021-1456) | Nessus | Huawei Local Security Checks | high |
| 147481 | EulerOS Virtualization 2.9.1 : libvirt (EulerOS-SA-2021-1631) | Nessus | Huawei Local Security Checks | high |
| 147104 | EulerOS Virtualization for ARM 64 3.0.6.0 : libvirt (EulerOS-SA-2021-1526) | Nessus | Huawei Local Security Checks | high |
| 146198 | Oracle Linux 7 : libvirt (ELSA-2020-5961) | Nessus | Oracle Linux Local Security Checks | high |
| 144728 | EulerOS Virtualization for ARM 64 3.0.2.0 : libvirt (EulerOS-SA-2021-1045) | Nessus | Huawei Local Security Checks | high |
| 143884 | SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2020:2970-1) | Nessus | SuSE Local Security Checks | high |
| 143851 | SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3143-1) | Nessus | SuSE Local Security Checks | high |
| 143850 | SUSE SLES15 Security Update : libvirt (SUSE-SU-2020:2969-1) | Nessus | SuSE Local Security Checks | high |
| 143827 | SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3038-1) | Nessus | SuSE Local Security Checks | high |
| 143759 | SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3039-1) | Nessus | SuSE Local Security Checks | high |
| 143649 | SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2020:3037-1) | Nessus | SuSE Local Security Checks | high |
| 143635 | SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3095-1) | Nessus | SuSE Local Security Checks | high |
| 143577 | Amazon Linux 2 : libvirt (ALAS-2020-1569) | Nessus | Amazon Linux Local Security Checks | high |
| 143055 | CentOS 7 : libvirt (CESA-2020:5040) | Nessus | CentOS Local Security Checks | high |
| 142982 | RHEL 8 : virt:8.2 and virt-devel:8.2 (RHSA-2020:5111) | Nessus | Red Hat Local Security Checks | high |
| 142821 | Scientific Linux Security Update : libvirt on SL7.x i686/x86_64 (2020:5040) | Nessus | Scientific Linux Local Security Checks | high |
| 142784 | Oracle Linux 7 : libvirt (ELSA-2020-5040) | Nessus | Oracle Linux Local Security Checks | high |
| 142700 | RHEL 7 : libvirt (RHSA-2020:5040) | Nessus | Red Hat Local Security Checks | high |
| 142188 | openSUSE Security Update : libvirt (openSUSE-2020-1778) | Nessus | SuSE Local Security Checks | high |
| 142183 | openSUSE Security Update : libvirt (openSUSE-2020-1777) | Nessus | SuSE Local Security Checks | high |
| 141137 | Debian DLA-2395-1 : libvirt security update | Nessus | Debian Local Security Checks | high |