CVE-2020-14339: High severity red hat libvirt-daemon-driver-storage-iscsi-direct vulnerability
A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Other sources
It was discovered that libvirt is accidentally leaking a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to be made against device mapper on the host. Thus a malicious QEMU has the potential to do serious damage to the host OS.
Upstream fix: https://libvirt.org/git/?p=libvirt.git;a=commit;h=22494556542c676d1b9e7f1c1f2ea13ac17e1e3e
— Red Hat
Affected Software
Remediation
Patch Available
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-14339?
CVE-2020-14339 is a vulnerability found in libvirt where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process, allowing for privileged operations to happen against the device-mapper on the host.
How does CVE-2020-14339 impact libvirt?
CVE-2020-14339 allows a malicious guest user or process to perform operations outside of the intended scope, potentially leading to unauthorized access or other malicious activities.
What is the severity of CVE-2020-14339?
The severity of CVE-2020-14339 is high, with a CVSS severity score of 8.8.
Which versions of libvirt are affected by CVE-2020-14339?
The affected versions of libvirt range from 6.2.0 up to, but not including, 6.6.0.
How can I fix CVE-2020-14339?
To fix CVE-2020-14339, it is recommended to upgrade to libvirt version 6.6.0 or later.