virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.

The remote host is affected by the vulnerability described in GLSA-201412-04 (libvirt: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libvirt. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to cause a Denial of Service or cause       information leakage. A local attacker may be able to escalate privileges,       cause a Denial of Service or possibly execute arbitrary code.
  Workaround :

    There is no known workaround at this time.

- Rebased to version 1.1.3.3

    - Fix crash in virDBusAddWatch (bz #885445)

    - Cleanup migration ports when migration is cancelled       (bz #1018530)

    - Fix virt-login-shell (bz #1054479)

    - CVE-2013-6458 libvirt: qemu: job usage issue in       several APIs leading to libvirtd crash (bz #1054206,       bz #1048631)

    - CVE-2013-6436 libvirt: crash in       lxcDomainGetMemoryParameters (bz #1049136, bz       #1042252)

    - CVE-2014-0028 libvirt: event registration bypasses       domain:getattr ACL (bz #1054203, bz #1048637)

    - CVE-2014-1447: libvirt: denial of service with       keepalive (bz 1052957, bz 1054808)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Rebased to version 1.1.3.1

    - CVE-2013-4400: virt-login-shell arbitrary file       overwrites vulnerability (bz #1015228, bz #1025685)

    - Fix possible domain disappearance on libvirtd crash       (bz #1015246)

    - Fix LXC container startup failure (bz #1014847)

    - Slim down libvirt LXC dependencies (bz #1012198)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
79814	GLSA-201412-04 : libvirt: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
72049	Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)	Nessus	Fedora Local Security Checks	high
70841	Fedora 20 : libvirt-1.1.3.1-1.fc20 (2013-20869)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2013-4400

high

Tenable Plugins

high

high

high