Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-6456

The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.

Published

2014-04-15T23:55:08.547

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.8 (MEDIUM)

CVSSv2 Vector

AV:A/AC:M/Au:S/C:N/I:P/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: COMPLETE
Exploitability Score

4.4

Impact Score

7.8

Weaknesses
  • Type: Primary
    CWE-59
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application redhat libvirt 1.0.1 Yes
Application redhat libvirt 1.0.2 Yes
Application redhat libvirt 1.0.3 Yes
Application redhat libvirt 1.0.4 Yes
Application redhat libvirt 1.0.5 Yes
Application redhat libvirt 1.0.5.1 Yes
Application redhat libvirt 1.0.5.2 Yes
Application redhat libvirt 1.0.5.3 Yes
Application redhat libvirt 1.0.5.4 Yes
Application redhat libvirt 1.0.5.5 Yes
Application redhat libvirt 1.0.5.6 Yes
Application redhat libvirt 1.0.6 Yes
Application redhat libvirt 1.1.0 Yes
Application redhat libvirt 1.1.1 Yes
Application redhat libvirt 1.1.2 Yes
Application redhat libvirt 1.1.3 Yes
Application redhat libvirt 1.1.4 Yes
Application redhat libvirt 1.2.0 Yes
Application redhat libvirt 1.2.1 Yes
Operating System fedoraproject fedora 20 Yes
References