Mageia 7 MGASA-2020-0473 Critical: Libvirt Denial of Service Issue
mageia
December 29, 2020
A double free memory issue was found to occur in the libvirt API responsible for requesting information about network interfaces of a running QEMU domain
Summary
A double free memory issue was found to occur in the libvirt API responsible
for requesting information about network interfaces of a running QEMU domain.
This flaw affects the polkit access control driver. Specifically, clients
connecting to the read-write socket with limited ACL permissions could use this
flaw to crash the libvirt daemon, resulting in a denial of service, or
potentially escalate their privileges on the system. The highest threat from
this vulnerability is to data confidentiality and integrity as well as system
availability (CVE-2020-25637).
References
- https://bugs.mageia.org/show_bug.cgi?id=27388
- https://access.redhat.com/errata/RHSA-2020:5040
- - https://www.cve.org/CVERecord?id=CVE-2020-25637
Resolution
SRPMS
- 7/core/libvirt-5.5.0-1.3.mga7
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 29 Dec 2020
URL: https://advisories.mageia.org/MGASA-2020-0473.html
Type: security
CVE: CVE-2020-25637
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!