CVE-2008-5086
Fixed in a distro release EPSS <1%
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
Products: libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.4.6-10 |
| Debian 13 | libvirt | 0.4.6-10 |
| Debian 14 | libvirt | 0.4.6-10 |
| Red Hat rhel virtualization 5 | libvirt | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-debuginfo | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-devel | 0:0.3.3-14.el5_3.1 |
| Red Hat rhel virtualization 5 | libvirt-python | 0:0.3.3-14.el5_3.1 |
| openSUSE Tumbleweed | libvirt | 7.7.0-2.1 |