CVE-2013-1766
published 2013-03-20CVE-2013-1766: libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
PriorityP411low3.6CVSS 2.0
AVLACLAuNCNIPAP
EPSS
0.38%
30.5th percentile
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Affected
77 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libvirt | < libvirt 0.9.12-8 (bookworm) | libvirt 0.9.12-8 (bookworm) |
| redhat | libvirt | <= 1.0.2 | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
| redhat | libvirt | — | — |
CVSS provenance
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
osv3.6LOW
vendor_debian3.6LOW
vendor_redhat3.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libvirt: kvm-group writable storage
vendor_redhat·2013-02-25·CVSS 3.6
CVE-2013-1766 [LOW] libvirt: kvm-group writable storage
libvirt: kvm-group writable storage
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Statement: Not vulnerable.
This issue did not affect the versions of the libvirt package as shipped with Red Hat Enterprise Linux 5 and 6.
Package: libvirt (Red Hat Enterprise Linux 5) - Not affected
Package: libvirt (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2013-1766: libvirt - libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which al...
vendor_debian·2013·CVSS 3.6
CVE-2013-1766 [LOW] CVE-2013-1766: libvirt - libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which al...
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Scope: local
bookworm: resolved (fixed in 0.9.12-8)
bullseye: resolved (fixed in 0.9.12-8)
forky: resolved (fixed in 0.9.12-8)
sid: resolved (fixed in 0.9.12-8)
trixie: resolved (fixed in 0.9.12-8)
GHSA
GHSA-c647-6rh6-6h3v: libvirt 1
ghsa_unreviewed·2022-05-17
CVE-2013-1766 [LOW] GHSA-c647-6rh6-6h3v: libvirt 1
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
OSV
CVE-2013-1766: libvirt 1
osv·2013-03-20·CVSS 3.6
CVE-2013-1766 [LOW] CVE-2013-1766: libvirt 1
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
No detection rules found.
No public exploits indexed.
2013-03-20
Published