CVE-2011-4600
Fixed in a distro release EPSS 2%
The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
Products: canonical ubuntu_linux, redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.9.9-1 |
| Debian 13 | libvirt | 0.9.9-1 |
| Debian 14 | libvirt | 0.9.9-1 |
| Red Hat rhel eus 6.2 | libvirt | 0:0.9.4-23.el6_2.4 |
| Red Hat rhel eus 6.2 | libvirt-client | 0:0.9.4-23.el6_2.4 |
| Red Hat rhel eus 6.2 | libvirt-debuginfo | 0:0.9.4-23.el6_2.4 |
| Red Hat rhel eus 6.2 | libvirt-devel | 0:0.9.4-23.el6_2.4 |
| Red Hat rhel eus 6.2 | libvirt-lock-sanlock | 0:0.9.4-23.el6_2.4 |
| Red Hat rhel eus 6.2 | libvirt-python | 0:0.9.4-23.el6_2.4 |
| Ubuntu 14.04 LTS | libvirt | 1.2.2-0ubuntu13.1.16 |
| openSUSE Tumbleweed | libvirt | 2.5.0-1.1 |