USN-5399-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-5399-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5399-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-5399-1

Related

Published

2022-05-02T17:01:25.873658Z

Modified

2022-05-02T17:01:25.873658Z

Summary

libvirt vulnerabilities

Details

It was discovered that libvirt incorrectly handled certain locking operations. A local attacker could possibly use this issue to cause libvirt to stop accepting connections, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-3667)

It was discovered that libvirt incorrectly handled threads during shutdown. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3975)

It was discovered that libvirt incorrectly handled the libxl driver. An attacker inside a guest could possibly use this issue to cause libvirtd to crash or stop responding, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2021-4147)

It was discovered that libvirt incorrectly handled the nwfilter driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. (CVE-2022-0897)

It was discovered that libvirt incorrectly handled the polkit access control driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-25637)

It was discovered that libvirt incorrectly generated SELinux labels. In environments using SELinux, this issue could allow the sVirt confinement to be bypassed. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3631)

References

Affected packages

Ubuntu:18.04:LTS / libvirt

Package

Name: libvirt
Purl: pkg:deb/ubuntu/libvirt?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.0-1ubuntu8.21

Affected versions

3.*

3.6.0-1ubuntu5

3.6.0-1ubuntu6

4.*

4.0.0-1ubuntu1

4.0.0-1ubuntu2

4.0.0-1ubuntu3

4.0.0-1ubuntu4

4.0.0-1ubuntu5

4.0.0-1ubuntu6

4.0.0-1ubuntu7

4.0.0-1ubuntu8

4.0.0-1ubuntu8.1

4.0.0-1ubuntu8.2

4.0.0-1ubuntu8.3

4.0.0-1ubuntu8.4

4.0.0-1ubuntu8.5

4.0.0-1ubuntu8.6

4.0.0-1ubuntu8.7

4.0.0-1ubuntu8.8

4.0.0-1ubuntu8.9

4.0.0-1ubuntu8.10

4.0.0-1ubuntu8.11

4.0.0-1ubuntu8.12

4.0.0-1ubuntu8.13

4.0.0-1ubuntu8.14

4.0.0-1ubuntu8.15

4.0.0-1ubuntu8.16

4.0.0-1ubuntu8.17

4.0.0-1ubuntu8.19

4.0.0-1ubuntu8.20

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libnss-libvirt"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libnss-libvirt-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-bin"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-clients"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-clients-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-gluster"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-gluster-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-rbd"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-rbd-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-sheepdog"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-sheepdog-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-zfs"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-driver-storage-zfs-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-system"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-daemon-system-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-dev"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-doc"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-sanlock"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-sanlock-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-wireshark"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt-wireshark-dbgsym"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt0"
        },
        {
            "binary_version": "4.0.0-1ubuntu8.21",
            "binary_name": "libvirt0-dbgsym"
        }
    ]
}

Ubuntu:20.04:LTS / libvirt

Package

Name: libvirt
Purl: pkg:deb/ubuntu/libvirt?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.0-0ubuntu8.16

Affected versions

5.*

5.4.0-0ubuntu5

6.*

6.0.0-0ubuntu1

6.0.0-0ubuntu2

6.0.0-0ubuntu3

6.0.0-0ubuntu4

6.0.0-0ubuntu5

6.0.0-0ubuntu6

6.0.0-0ubuntu7

6.0.0-0ubuntu8

6.0.0-0ubuntu8.1

6.0.0-0ubuntu8.2

6.0.0-0ubuntu8.3

6.0.0-0ubuntu8.4

6.0.0-0ubuntu8.5

6.0.0-0ubuntu8.7

6.0.0-0ubuntu8.8

6.0.0-0ubuntu8.9

6.0.0-0ubuntu8.10

6.0.0-0ubuntu8.11

6.0.0-0ubuntu8.12

6.0.0-0ubuntu8.13

6.0.0-0ubuntu8.14

6.0.0-0ubuntu8.15

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libnss-libvirt"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libnss-libvirt-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-clients"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-clients-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-lxc"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-lxc-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-qemu"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-qemu-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-gluster"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-gluster-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-rbd"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-rbd-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-zfs"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-storage-zfs-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-vbox"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-vbox-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-xen"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-driver-xen-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-system"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-system-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-system-systemd"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-daemon-system-sysv"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-dev"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-doc"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-sanlock"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-sanlock-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-wireshark"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt-wireshark-dbgsym"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt0"
        },
        {
            "binary_version": "6.0.0-0ubuntu8.16",
            "binary_name": "libvirt0-dbgsym"
        }
    ]
}