REDHAT-BUG-1986094
First published: Mon Jul 26 2021(Updated: )
A flaw was found in the libvirt virStoragePoolLookupByTargetPath API. The storagePoolLookupByTargetPath() function does not properly release a locked object (virStoragePoolObj) on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. Upstream fix: <a href="https://libvirt.org/git/?p=libvirt.git;a=commit;h=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87">https://libvirt.org/git/?p=libvirt.git;a=commit;h=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| libvirt |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://libvirt.org/git/?p=libvirt.git;a=commit;h=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1986113
- https://libvirt.org/git/?p=libvirt.git;a=commit;h=7aa0e8c0cb8a6293d0c6f7e3d29c13b96dec2129
- https://access.redhat.com/errata/RHSA-2021:3703
- https://access.redhat.com/security/cve/cve-2021-3667
- https://access.redhat.com/errata/RHSA-2021:3704
- https://access.redhat.com/errata/RHSA-2021:4191
- https://bugzilla.redhat.com/show_bug.cgi?id=1986094
Frequently Asked Questions
What is the severity of REDHAT-BUG-1986094?
The severity of REDHAT-BUG-1986094 is moderate due to its potential impact on access control.
How do I fix REDHAT-BUG-1986094?
To fix REDHAT-BUG-1986094, apply the latest patches released for libvirt that address this vulnerability.
What is the impact of REDHAT-BUG-1986094?
The impact of REDHAT-BUG-1986094 allows clients with limited ACL permissions to exploit a flaw in the virStoragePoolLookupByTargetPath API.
Who is affected by REDHAT-BUG-1986094?
Users and applications utilizing the libvirt API for storage pool management may be affected by REDHAT-BUG-1986094.
Is there a workaround for REDHAT-BUG-1986094?
Currently, there are no known workarounds for REDHAT-BUG-1986094 other than applying the appropriate security patches.
- agent/references
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-3667
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/severity
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libvirt
- canonical/libvirt