CVE-2019-10166 - CVE House

Back to Database

Status published High CVE-2019-10166

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and...

7.8 CVSS

Vulnerability Description

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10166

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from libvirt

View All →

A NULL pointer dereference was found in the libvirt API...

The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and...

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x...

A vulnerability was found in libvirt >= 4.1.0 in the...

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion...

Affected Vendor

libvirt

View all reports →

Affected Software

libvirt

Vulnerable Versions:

4.x.x before 4.10.1, 5.x.x before 5.4.1

Timeline

Official Publish: August 2nd, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation