CVE-2013-4400 — Redhat Libvirt vulnerability

CWE-2648 documents7 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 83.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Redhat Libvirt
Timeline
PublishedDec 9
Latest updateMay 17

Description

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶Debianredhat/libvirt< 1.1.4-1+3
▶NVDredhat/libvirt1.1.2, 1.1.3+1

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-362v-94q6-5qwm: virt-login-shell in libvirt 1↗2022-05-17
▶
OSV
CVE-2013-4400: virt-login-shell in libvirt 1↗2013-12-09
▶
CVEList
CVE-2013-4400: virt-login-shell in libvirt 1↗2013-12-09
▶

📋Vendor Advisories

2
Red Hat
libvirt: virt-login-shell arbitrary file overwrites vulnerability↗2013-10-21
▶
Debian
CVE-2013-4400: libvirt - virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite ...↗2013
▶

💬Community

2
Bugzilla
CVE-2013-4400 libvirt: virt-login-shell arbitrary file overwrites vulnerability [fedora-all]↗2013-11-01
▶
Bugzilla
CVE-2013-4400 libvirt: virt-login-shell arbitrary file overwrites vulnerability↗2013-10-03
▶
CVE-2013-4400 — Redhat Libvirt vulnerability | cvebase