CVE-2013-1766
Fixed in a distro release EPSS <1%
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Products: redhat libvirt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 0.9.12-8 |
| Debian 13 | libvirt | 0.9.12-8 |
| Debian 14 | libvirt | 0.9.12-8 |
| Debian 6.0 | libvirt | 0.8.3-5+squeeze4 |