CVEvulnerability
CVE-2019-3886
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
- CVSS 2.0 ([email protected])
- 4.8 MEDIUM — AV:A/AC:L/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-862
Description
An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.
Affected configurations
• redhat libvirt (>= 4.8.0 < 5.3.0)
• opensuse leap 42.3
• fedoraproject fedora 29
• fedoraproject fedora 30
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/107777 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:3723 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/ lists.fedoraproject.org
- https://usn.ubuntu.com/4021-1/ Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/107777 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:3723 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/ lists.fedoraproject.org
- https://usn.ubuntu.com/4021-1/ Third Party Advisory