CVE-2013-4419
First published: Wed Oct 09 2013(Updated: )
libguestfs is a library for accessing and modifying guest disk images. It was found that guestfish, which enables shell scripting and command line access to libguestfs, insecurely created the temporary directory used to store the network socket when started in server mode (using the "--listen" option). If guestfish were run with the "--listen" option, a local attacker could use this flaw to intercept and modify other users' guestfish commands, allowing them to perform arbitrary guestfish actions (such as modifying virtual machines) with the privileges of a different user, or use this flaw to obtain authentication credentials. Acknowledgements: This issue was discovered by Michael Scherer of the Red Hat Regional IT team.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/libguestfs | <1.20.12 | 1.20.12 |
| redhat/libguestfs | <1.22.7 | 1.22.7 |
| redhat/libguestfs | <1.24 | 1.24 |
| Libguestfs Libguestfs | >=1.20.0<=1.20.12 | |
| Libguestfs Libguestfs | >=1.22.0<=1.22.7 | |
| Suse Suse Linux Enterprise Software Development Kit | =11.0-sp3 | |
| Novell Suse Linux Enterprise Server | =11.0-sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809855&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809855&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809857&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809857&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809858&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=809858&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1016960#c5
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=811007&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=811007&action=edit
- https://www.redhat.com/archives/libguestfs/2013-October/msg00031.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1020535
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1020950
- https://rhn.redhat.com/errata/RHSA-2013-1536.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1016960
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2013-1536.html
- http://secunia.com/advisories/55813
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/author
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-4419
- agent/software-canonical-lookup
- agent/tags
- agent/trending
- vendor/libguestfs
- canonical/libguestfs libguestfs
- version/libguestfs libguestfs/1.20.0
- version/libguestfs libguestfs/1.20.12
- version/libguestfs libguestfs/1.22.0
- version/libguestfs libguestfs/1.22.7
- vendor/suse
- canonical/suse suse linux enterprise software development kit
- version/suse suse linux enterprise software development kit/11.0-sp3
- vendor/novell
- canonical/novell suse linux enterprise server
- version/novell suse linux enterprise server/11.0-sp3
- package-manager/redhat