Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat libvirt ‘virt-login-shell’本地提权漏洞
Vulnerability Description
Red Hat libvirt是美国红帽(Red Hat)公司的一个用于实现Linux虚拟化功能的Linux API,它支持各种Hypervisor,包括Xen和KVM,以及QEMU和用于其他操作系统的一些虚拟产品。 libvirt 1.1.2至1.1.3版本中的virt-login-shell程序中存在安全漏洞,该漏洞源于程序没有正确过滤环境变量或命令行参数。本地攻击者可利用该漏洞覆盖任意文件,获取权限。
CVSS Information
N/A
Vulnerability Type
N/A