CVE-2020-25637

Aliases:ALPINE-CVE-2020-25637DEBIAN-CVE-2020-25637UBUNTU-CVE-2020-25637
Advisory lineage Upstream: 0 Downstream: 20
Modified
Published: 06 Oct 2020, 00:00
Last modified:04 Aug 2024, 15:40

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.2 HIGH
v2.0 (nvd)
EPSS Score
0.53% LOW
1% probability +0.43%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Oct 2020, 00:00
Published
Vulnerability first disclosed
04 Aug 2024, 15:40
Last Modified
Vulnerability information updated

Description

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.53%• Percentile: 44%

Techniques & Countermeasures

  • CWE-415•Double Free

    The product calls free() twice on the same memory address.

Affected Systems

  • alpine•libvirt

    < 6.6.0-r3

  • debian•libvirt

    < 6.8.0-1 | < 6.8.0-1 | < 6.8.0-1 | < 6.8.0-1

  • ubuntu•libvirt

    all | < 4.0.0-1ubuntu8.21 | < 6.0.0-0ubuntu8.16

  • opensuse•leap

    15.1 | 15.2

  • redhat•libvirt

    < 6.8.0

References (10)