Vulnerability in Red Hat Libvirt

CVE-2013-1766

libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

Affected products

Redhat Libvirt — versions 0.0.1, 0.0.2, 0.0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)