Information disclosure in libvirt - CVE-2020-14339

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU46198

Information disclosure in libvirt - CVE-2020-14339

Published: September 1, 2020


Vulnerability identifier: #VU46198
CSH Severity: Medium
CVSS v4: 8.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-14339
CWE-ID: CWE-200
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to libvirt leaks a file descriptor for /dev/mapper/control. A remote user on guest operating system can obtain leaked descriptor address and escalate privileges on the system.


Affected software

libvirt
Arch Linux
Gentoo Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Opensuse
openEuler
libvirt (Alpine package)
libvirt-daemon-driver-network
libvirt-daemon-kvm
libvirt-daemon-config-nwfilter
libvirt-daemon-qemu
libvirt-client
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-interface
libvirt-daemon-config-network
libvirt-debuginfo
libvirt-bash-completion
libvirt-debugsource
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-rbd
libvirt-daemon
libvirt-devel
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-mpath
libvirt
libvirt-daemon-driver-qemu
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-scsi
libvirt-libs
libvirt-admin
libvirt-daemon-driver-storage-logical
libvirt-nss
libvirt-wireshark
libvirt-daemon-driver-storage-iscsi
libvirt-lock-sanlock
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-iscsi-direct
libvirt-docs
app-emulation/libvirt
dev-python/libvirt-python
Red Hat Enterprise Linux Advanced Virtualization

How to mitigate CVE-2020-14339

Install updates from vendor's website.

libvirt - update to 6.6.0
libvirt-daemon-driver-network - update to 6.2.0-10
libvirt-daemon-kvm - update to 6.2.0-10
libvirt-daemon-config-nwfilter - update to 6.2.0-10
libvirt-daemon-qemu - update to 6.2.0-10
libvirt-client - update to 6.2.0-10
libvirt-daemon-driver-nodedev - update to 6.2.0-10
libvirt-daemon-driver-interface - update to 6.2.0-10
libvirt-daemon-config-network - update to 6.2.0-10
libvirt-debuginfo - update to 6.2.0-10
libvirt-bash-completion - update to 6.2.0-10
libvirt-debugsource - update to 6.2.0-10
libvirt-daemon-driver-storage - update to 6.2.0-10
libvirt-daemon-driver-storage-core - update to 6.2.0-10
libvirt-daemon-driver-storage-rbd - update to 6.2.0-10
libvirt-daemon - update to 6.2.0-10
libvirt-devel - update to 6.2.0-10
libvirt-daemon-driver-secret - update to 6.2.0-10
libvirt-daemon-driver-storage-gluster - update to 6.2.0-10
libvirt-daemon-driver-storage-mpath - update to 6.2.0-10
libvirt - update to 6.2.0-10
libvirt-daemon-driver-qemu - update to 6.2.0-10
libvirt-daemon-driver-nwfilter - update to 6.2.0-10
libvirt-daemon-driver-storage-scsi - update to 6.2.0-10
libvirt-libs - update to 6.2.0-10
libvirt-admin - update to 6.2.0-10
libvirt-daemon-driver-storage-logical - update to 6.2.0-10
libvirt-nss - update to 6.2.0-10
libvirt-wireshark - update to 6.2.0-10
libvirt-daemon-driver-storage-iscsi - update to 6.2.0-10
libvirt-lock-sanlock - update to 6.2.0-10
libvirt-daemon-driver-storage-disk - update to 6.2.0-10
libvirt-daemon-driver-storage-iscsi-direct - update to 6.2.0-10
libvirt-docs - update to 6.2.0-10
app-emulation/libvirt - update to 8.2.0
dev-python/libvirt-python - update to 8.2.0

External References

Related Security Bulletins