CVE-2023-2700

概要

参考情報

• access.redhat.com/security/cve/CVE-2023-2700 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.com/libvirt/libvirt/-/commit/6425a311b8ad19d6f9c0b315bf1d722551ea3585 · Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVK6JKP36CHE7YAFDJNPNLTW4OWJJ7TQ
• security.netapp.com/advisory/ntap-20230706-0001

libvirt のその他の脆弱性

• CVE-2024-8235中 6.2A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms …
• CVE-2024-2496中 5.5A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a h…
• CVE-2021-3975中 6.5A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple thr…
• CVE-2022-0897中 4.3A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex b…
• CVE-2021-4147中 6.5A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock …