Libvirt Security Notice: LSN-2020-0001

Denial of Service via storage pools without target paths

Lifecycle

Credits

See also

• CVE-2020-10703

Description

The implementation of the virStoragePoolLookupByTargetPath API crashed on network-based storage pools with missing target paths.

Impact

A read-only client can cause a denial of service attack against a privileged client by crashing libvirtd if such a pool is known to libvirtd.

Workaround

The crash only happens on hosts with network-based storaged pools without a target path. Denying access to the readonly libvirt socket will avoid the potential for a denial of service attack, but will not prevent the out-of-bounds access from causing a crash for a privileged client, although such a crash is no longer a security problem.

Affected product: libvirt

Alternative formats: [xml] [text]