CVE-2013-4400

Published: Dec 9, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.

Affected (2)

Products: Redhat: Libvirt

Redhat

1 product

Libvirt

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Libvirt	Version 1.1.2
Redhat Libvirt	Version 1.1.3

Related CWEs

CWE-264

References (16)

http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=3e2f27e13b94f7302ad948bcacb5e02c859a25fc

Source: secalert@redhat.com

http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8c3586ea755c40d5e01b22cb7b5c1e668cdec994

Source: secalert@redhat.com

http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7fcc799ad5d8f3e55b89b94e599903e3c092467

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-November/121370.html

Source: secalert@redhat.com

http://secunia.com/advisories/60895

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201412-04.xml

Source: secalert@redhat.com

http://wiki.libvirt.org/page/Maintenance_Releases

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1015228

Source: secalert@redhat.com

Patch

http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=3e2f27e13b94f7302ad948bcacb5e02c859a25fc