CVE-2021-3631: fallo en libvirt
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.5%
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Productos afectados
n/a · libvirtReferencias
https://access.redhat.com/errata/RHSA-2021:3631https://bugzilla.redhat.com/show_bug.cgi?id=1977726https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2https://gitlab.com/libvirt/libvirt/-/issues/153https://lists.debian.org/debian-lts-announce/2024/04/msg00000.htmlhttps://security.gentoo.org/glsa/202210-06https://security.netapp.com/advisory/ntap-20220331-0010/