Vulnerability in Libvirt

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.

EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.

Affected products

  • Libvirt — versions 0.3.2, 0.3.3, 0.4.1
  • N/a — versions n/a

References