Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE: 2021:3540-1 Critical Alert: libvirt Denial of Service Vulnerability

suse
Calendar Grey October 27, 2021
Scroller Suse
Critical SUSE patch addresses a vulnerability in libvirt, alongside introducing five further enhancements.
An update that solves one vulnerability and has 5 fixes is now available

Summary

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843) Non-security issues fixed: - resolved hangs/crashes on libvirtd shutdown (bsc#1182783) - qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772) - libxl: Fix driver reload (bsc#1190420) - libxl: Add support for 'e820_host' settings (bsc#1185081) - libxl: Fix domain shutdown (bsc#1184152) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15-SP1:

Topics%20covered

Topics Covered

security advisory update DoS important SUSE libvirt patch instructions

References

#1182783 #1184152 #1184772 #1185081 #1188843

#1190420

Cross- CVE-2021-3667

CVSS scores:

CVE-2021-3667 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server for SAP 15-SP1

SUSE Linux Enterprise Server 15-SP1-LTSS

SUSE Linux Enterprise Server 15-SP1-BCL

SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS

SUSE Enterprise Storage 6

SUSE CaaS Platform 4.0

https://www.suse.com/security/cve/CVE-2021-3667.html

https://bugzilla.suse.com/1182783

https://bugzilla.suse.com/1184152

https://bugzilla.suse.com/1184772

https://bugzilla.suse.com/1185081

https://bugzilla.suse.com/1188843

https://bugzilla.suse.com/1190420

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3540-1
Rating: important

Topics%20covered

Topics Covered

security advisory update DoS important SUSE libvirt patch instructions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.