CVEvulnerability

CVE-2008-5086

7.2 HIGH Published 2008-12-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.

Affected configurations

• libvirt libvirt 0.3.2 • libvirt libvirt 0.3.3 • libvirt libvirt 0.4.1 • libvirt libvirt 0.4.2 • libvirt libvirt 0.4.6 • libvirt libvirt 0.5.0 • libvirt libvirt 0.5.1

References