Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 438
Alerts This Week
Warning Icon 1 438

Ubuntu 13.10 USN-2026-1 Moderate: Libvirt Access Control Flaw

ubuntu
Calendar Grey November 11, 2013
Scroller Ubuntu
The Ubuntu Security Notice USN-2026-1 highlights a vulnerability within libvirt, enabling unauthorized access rights. Users are advised to update promptly.
libvirt would allow unintended access privileges.

Summary

libvirt would allow unintended access privileges.

Software Description:

- libvirt: Libvirt virtualization toolkit

Details:

It was discovered that libvirt incorrectly checked privileges when the

virConnectDomainXMLToNative API function was used. An attacker could

possibly use this flaw to gain write privileges, contrary to expected

behaviour.

Topics%20covered

Topics Covered

security advisory privilege escalation access control moderate severity ubuntu libvirt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  libvirt0                        1.1.1-0ubuntu8.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2013-4401

Severity
important
Lowest
Low
Medium
High
Critical

November 11, 2013

Topics%20covered

Topics Covered

security advisory privilege escalation access control moderate severity ubuntu libvirt

Package Information

https://launchpad.net/ubuntu/+source/libvirt/1.1.1-0ubuntu8.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.