CVE-2020-14339
- State
- Published
- Severity
- Not scored
- Published
- Dec 3, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jun 17, 2020
Description
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
libvirtn/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1860069
- GLSA-202101-22vendor-advisory
- GLSA-202210-06vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.