Vulnerability Details CVE-2018-6764
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.2%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
- http://www.ubuntu.com/usn/USN-3576-1
- https://access.redhat.com/errata/RHSA-2018:3113
- https://www.debian.org/security/2018/dsa-4137
- https://www.redhat.com/archives/libvir-list/2018-February/msg00239.html
- http://www.ubuntu.com/usn/USN-3576-1
- https://access.redhat.com/errata/RHSA-2018:3113
- https://www.debian.org/security/2018/dsa-4137
- https://www.redhat.com/archives/libvir-list/2018-February/msg00239.html
Products affected by CVE-2018-6764
-
cpe:2.3:a:redhat:libvirt:-
-
cpe:2.3:a:redhat:virtualization:4.0
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:17.10
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0