CVE-2021-3631

Katalog CVE

CVSS 6.3 · Medium EPSS 0,49%

Kerentanan Incorrect Permission Assignment for Critical Resource pada redhat libvirt, redhat openshift container platform +2 lainnya. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Rincian

Terbit di NVD

2 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-732: Incorrect Permission Assignment for Critical Resource

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2021:3631 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1977726 issue tracking · advisory vendor
• https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2 patch · advisory pihak ketiga
• https://gitlab.com/libvirt/libvirt/-/issues/153 exploit · advisory pihak ketiga
• https://security.gentoo.org/glsa/202210-06 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220331-0010/ advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html