CVE-2013-6456: Medium severity redhat libvirt vulnerability
The LXC driver (lxc/lxcdriver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libvirtto a version that resolves this vulnerability.Fixed in 7.0.0-3+deb11u3Fixed in 9.0.0-4+deb12u2Fixed in 11.2.0-2
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6456?
The severity of CVE-2013-6456 is classified as important, indicating potential significant impact on system security.
How do I fix CVE-2013-6456?
To fix CVE-2013-6456, upgrade libvirt to version 7.0.0-3+deb11u2, 9.0.0-4, 10.5.0-1, or 10.6.0-1 or higher.
Which versions of libvirt are affected by CVE-2013-6456?
Versions of libvirt from 1.0.1 through 1.2.1 are affected by CVE-2013-6456.
Can CVE-2013-6456 be exploited remotely?
CVE-2013-6456 cannot be exploited remotely as it requires local user access to execute the attack.
What attack vectors are associated with CVE-2013-6456?
CVE-2013-6456 is associated with local user attacks using the virDomainDeviceDetach and virDomainDeviceAttach APIs to manipulate host devices.