CVE-2019-10166
Public on 2019-08-02
Modified on 2019-08-27
Description
It was discovered that libvirtd would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.
CVSS v3 Base Score
See breakdown
