CVE-2011-4600 REJECTED

The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.

EPSS 0.31% · 53.6th percentile

Risk Scores

EPSS Score
0.31%
53.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibvirt0, 1.1.1-0ubuntu8, 1.1.1-0ubuntu9

Timeline

References

Open in Interactive Console →