Most recent entries from all

CVE-2020-15708 — Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability

Affected: Ubuntu libvirt

Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.

USN-4452-1 — libvirt vulnerability

Affected: Ubuntu:20.04:LTS: libvirt

Trent Shea working with Trend Micro´s Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacker could use this issue to access libvirt and escalate privileges.