CVE-2013-4401: High severity red hat libvirt-daemon-driver-storage-iscsi-direct vulnerability
A flaw was found in libvirt where libvirtd could crash due to how XML was parsed [1]. With the introduction of ACL permissions in libvirt 1.1.0, this flaw could be manipulated to allow a remote user with connect:read privileges to elevate them to the more permissive domain:write privilege.
This vulnerability was introduced in libvirt 1.1.0.
[1] https://bugzilla.redhat.com/showbug.cgi?id=1012196;
Other sources
The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained from third party information.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4401?
CVE-2013-4401 is classified as a high severity vulnerability due to potential privilege escalation.
How do I fix CVE-2013-4401?
To fix CVE-2013-4401, update libvirt to version 1.1.4 or later.
What systems are affected by CVE-2013-4401?
CVE-2013-4401 affects Red Hat Libvirt versions 1.1.0 to 1.1.3.
How can CVE-2013-4401 be exploited?
CVE-2013-4401 can be exploited by remote users with connect:read privileges to escalate to domain:write privileges.
Is CVE-2013-4401 a remote vulnerability?
Yes, CVE-2013-4401 is considered a remote vulnerability since it can be exploited over the network.