Vulnetix
Try Vulnetix Request Demo
CVE-2019-3886 PUBLISHED CVSS 5.4 MEDIUM

Reported by redhat · Published April 4, 2019

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

Risk Scores

CVSS v3.0
5.4
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

VendorProductVersions
The libvirt Projectlibvirt4.8.0 and above
The libvirt Projectlibvirt4.8.0 and above

Timeline

References

Open in Interactive Console →