Detections
Analytics
Mandriva Linux Security Advisory : libvirt (MDVSA-2014:097)
medium Nessus Plugin ID 74075
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
Multiple vulnerabilities has been discovered and corrected in libvirt :The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to paths under /proc//root and the virInitctlSetRunLevel function (CVE-2013-6456).
libvirt was patched to prevent expansion of entities when parsing XML files. This vulnerability allowed malicious users to read arbitrary files or cause a denial of service (CVE-2014-0179).
The updated packages have been upgraded to the 1.1.3.5 version and patched to correct these issues.
Solution
Update the affected packages.See Also
https://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html
Plugin Details
Severity: Medium
ID: 74075
File Name: mandriva_MDVSA-2014-097.nasl
Version: 1.5
Type: local
Family: Mandriva Local Security Checks
Published: 5/19/2014
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 5
Vector: CVSS2#AV:A/AC:M/Au:S/C:N/I:P/A:C
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:libvirt-utils, cpe:/o:mandriva:business_server:1, p-cpe:/a:mandriva:linux:python-libvirt, p-cpe:/a:mandriva:linux:lib64virt0, p-cpe:/a:mandriva:linux:lib64virt-devel
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 5/16/2014
Reference Information
CVE: CVE-2013-6456, CVE-2014-0179
MDVSA: 2014:097