CVE-2011-4600

Description

The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.306

Associated Vulnerability

Vulnerability	OS Platform
Libvirt virtualization toolkit (USN-2867-1) libvirt0_0.9.8-2ubuntu17.23_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt0_0.9.8-2ubuntu17.23_amd64.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt0_1.2.12-0ubuntu14.4_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt0_1.2.12-0ubuntu14.4_amd64.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt0_1.2.2-0ubuntu13.1.16_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt0_1.2.2-0ubuntu13.1.16_amd64.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_0.9.8-2ubuntu17.23_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_0.9.8-2ubuntu17.23_amd64.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_1.2.12-0ubuntu14.4_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_1.2.12-0ubuntu14.4_amd64.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_1.2.2-0ubuntu13.1.16_i386.deb	Linux
Libvirt virtualization toolkit (USN-2867-1) libvirt-bin_1.2.2-0ubuntu13.1.16_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234