Libvirt Security Notice: LSN-2019-0003

Insecure permissions for systemd socket for virtlockd/virtlogd

Lifecycle

Credits

See also

• CVE-2019-10132

Description

The virtlockd-admin.socket and virtlogd-admin.socket unit files do not set the SocketMode parameter and thus create a world accessible UNIX domain socket. Furthermore the code fails to validate the identity of clients connecting to these sockets.

Impact

An unprivileged user is able to connect to the virtlockd or virtlogd daemons and use the administrative RPC commands to elevate their privileges

Workaround

Disable the virtlockd-admin.socket and virtlogd-admin.socket units in systemd. Alternative customize them to add SocketMode=0600 locally.

Affected product: libvirt

Alternative formats: [xml] [text]