CVE-2019-10167 - CVE House
Back to Database
Status published High CVE-2019-10167

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x...

Vulnerability Description

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10167

Credits & Attribution

No credits recorded in the NVD database.

References

More from libvirt

View All →
CVE-2020-10703
A NULL pointer dereference was found in the libvirt API...
Medium 6.5
CVE-2019-10168
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and...
High 8.8
CVE-2019-10166
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and...
High 7.8
CVE-2019-10132
A vulnerability was found in libvirt >= 4.1.0 in the...
High 8.8
CVE-2018-1064
libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion...
High 7.5

Affected Vendor

Affected Software

libvirt
Vulnerable Versions:
4.x.x before 4.10.1, 5.x.x before 5.4.1

Timeline

Official Publish: August 2nd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-284 CWE-250

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1078 Valid Accounts
Persistence
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact
T1548 Abuse Elevation Control Mechanism
Defense Evasion
T1574 Hijack Execution Flow
Privilege Escalation
T1485 Data Destruction
Impact