Description (CNA)
Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ubuntu / libvirt | affected unspecified before 6.0.0-0ubuntu8.3 |
CWE
CWE-732
References
ADP enrichment
No English description supplied.