Libvirt Security Notice: LSN-2019-0001

virDomainGetHostname and virDomainGetTime don't enforce read-only perms

Lifecycle

Credits

See also

• CVE-2019-3886

Description

The virDomainGetHostname API does not prevent use on a read only connection. Furthermore the fine grained ACL checking incorrectly validates read permissions instead of write permission.

Impact

An unprivileged host OS user can connect to the read only libvirt socket and issue API calls that will make QEMU guest agent requests. If the guest OS agent misbehaves (accidentally or maliciously) these requests can block operation of other API calls made against the guest

Workaround

Disable the QEMU agent in any VMs whose admin is not trustworthy. Alternative reconfigure the host access control to block use of the readonly libvirtd socket

Affected product: libvirt

Alternative formats: [xml] [text]