CVE-2019-3886

Description

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

References

https://usn.ubuntu.com/4021-1/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886

https://access.redhat.com/errata/RHBA-2019:3723

http://www.securityfocus.com/bid/107777

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3