Permissions, Privileges, and Access Controls in libvirt - CVE-2019-10132

Vulnerability identifier: #VU18596

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-10132

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a missing SocketMode configuration parameter within the in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A local user can perform administrative tasks against virtlockd and virtlogd daemons.

libvirt
Red Hat Gluster Storage Server for On-premise
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization
libvirt (Ubuntu package)
libvirt
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power
Fedora

Install updates from vendor's repository.

libvirt (Ubuntu package) - addressed in versions 4.6.0-2ubuntu3.7, 5.0.0-1ubuntu2.3
libvirt - addressed in versions 4.1.0-7.fc28, 4.7.0-4.fc29, 4.7.0-5.fc29, 5.1.0-6.fc30

• https://access.redhat.com/errata/RHSA-2019:1264
• https://access.redhat.com/errata/RHSA-2019:1268
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10132
• https://security.libvirt.org/2019/0003.html

• Privilege escalation in libvirt
• Ubuntu update for libvirt
• Red Hat update for libvirt
• Red Hat update for virt:rhel
• Fedora 30 update for libvirt
• Fedora 29 update for libvirt
• Fedora 28 update for libvirt
• Fedora 29 update for libvirt