libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2013-03-20 15:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-1766
Mitre link : CVE-2013-1766
CVE.ORG link : CVE-2013-1766
JSON object : View
Products Affected
redhat
- libvirt
CWE
CWE-264
Permissions, Privileges, and Access Controls