REDHAT-BUG-607810: Medium severity oracle libvirt vulnerability
It was found that libvirt did not honour the user defined main disk format in guest XML when looking up disk backing stores in the security drivers. This could be possibly exploited by priviledged guest user to access arbitrary files on the host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-607810?
The severity of REDHAT-BUG-607810 is considered high due to potential arbitrary file access on the host.
How do I fix REDHAT-BUG-607810?
To fix REDHAT-BUG-607810, users should update to the latest version of libvirt that addresses the vulnerability.
Who is affected by REDHAT-BUG-607810?
Privileged guest users running libvirt on the host system are most affected by REDHAT-BUG-607810.
What are the potential impacts of REDHAT-BUG-607810?
The potential impacts of REDHAT-BUG-607810 include unauthorized access to arbitrary files on the host system.
What is the nature of the vulnerability in REDHAT-BUG-607810?
The vulnerability in REDHAT-BUG-607810 arises from libvirt not honoring user-defined disk formats, leading to security bypass.