Ubuntu Security Notice 6763-1 - Martin Å irokov discovered that libvirt incorrectly handled certain memory operations. A local attacker could possibly use this issue to access virtproxyd without authorization.
bf2c08727c2512c2e1c685708d13693662d532ce0a0e38ceac2e34041c213272
==========================================================================
Ubuntu Security Notice USN-6763-1
May 07, 2024
libvirt vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
Summary:
libvirt could allow unintended access to the virtproxyd service.
Software Description:
- libvirt: Libvirt virtualization toolkit
Details:
Martin Širokov discovered that libvirt incorrectly handled certain memory
operations. A local attacker could possibly use this issue to access
virtproxyd without authorization.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
libvirt-daemon 10.0.0-2ubuntu8.2
libvirt-daemon-system 10.0.0-2ubuntu8.2
libvirt0 10.0.0-2ubuntu8.2
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6763-1
CVE-2024-4418
Package Information:
https://launchpad.net/ubuntu/+source/libvirt/10.0.0-2ubuntu8.2