QwikSec

Security Database

CVE

CWE

Training

CVE-2021-3631

Published: Mar 2, 2022

Modified: Nov 19, 2024

PUBLISHED

Description

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Vendor	Product	Versions
n/a	libvirt	affected `Fixed-In - libvirt v7.5.0`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=1977726

https://gitlab.com/libvirt/libvirt/-/issues/153

https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2

https://access.redhat.com/errata/RHSA-2021:3631

https://security.netapp.com/advisory/ntap-20220331-0010/

vendor-advisory

[debian-lts-announce] 20240401 [SECURITY] [DLA 3778-1] libvirt security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.