CVE-2020-14339: High severity red hat libvirt-daemon-driver-storage-iscsi-direct vulnerability

Published Jul 17, 2020
·
Updated

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Other sources

It was discovered that libvirt is accidentally leaking a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to be made against device mapper on the host. Thus a malicious QEMU has the potential to do serious damage to the host OS.

Upstream fix: https://libvirt.org/git/?p=libvirt.git;a=commit;h=22494556542c676d1b9e7f1c1f2ea13ac17e1e3e

Red Hat

Affected Software

3 affected componentsFixes available
redhat/libvirt<6.6.0
6.6.0
redhat libvirt>=6.2.0<6.7.0
redhat Enterprise Linux=8.0

Remediation

Information

This issue is mitigated on Red Hat Enterprise Linux if SELinux is in enforcing mode, which prevents the `/dev/mapper/control` file descriptor from being accessible by a guest user/process.

Event History

Jul 17, 2020
CVE Published
12:00 AM
Data Sourced
12:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Dec 3, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2020-14339?

CVE-2020-14339 is a vulnerability found in libvirt where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process, allowing for privileged operations to happen against the device-mapper on the host.

2

How does CVE-2020-14339 impact libvirt?

CVE-2020-14339 allows a malicious guest user or process to perform operations outside of the intended scope, potentially leading to unauthorized access or other malicious activities.

3

What is the severity of CVE-2020-14339?

The severity of CVE-2020-14339 is high, with a CVSS severity score of 8.8.

4

Which versions of libvirt are affected by CVE-2020-14339?

The affected versions of libvirt range from 6.2.0 up to, but not including, 6.6.0.

5

How can I fix CVE-2020-14339?

To fix CVE-2020-14339, it is recommended to upgrade to libvirt version 6.6.0 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203