cbcvebase.
CVE-2013-1766
published 2013-03-20

CVE-2013-1766: libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.

low3.6CVSS 3.1
AVLACLAuNCNIPAP
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.

Affected

77 ranges· showing 25
VendorProductVersion rangeFixed in
debianlibvirt< libvirt 0.9.12-8 (bookworm)libvirt 0.9.12-8 (bookworm)
redhatlibvirt<= 1.0.2
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt
redhatlibvirt

CVSS provenance

nvd3.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
osv3.6LOW