Debian: 2194-1: libvirt: insufficient checks


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Debian: 2194-1: libvirt: insufficient checks
# 1  
Old 03-18-2011
Debian: 2194-1: libvirt: insufficient checks

LinuxSecurity.com: It was discovered that libvirt, a library for interfacing with different virtualization systems, did not properly check for read-only connections. This allowed a local attacker to perform a denial of service (crash) or possibly escalate privileges. [More...]

More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Cybersecurity

Experience with libvirt netfilter API

Hi all, I would like to get some ideas and opinions on matter of libvirt netfilter application in KVM environment. I am looking for some easy way to control it with an API and possible experience with that and its performance in real life application. Thanks for all ideas (0 Replies)
Discussion started by: smoofy
0 Replies
Login or Register to Ask a Question
LIBVIRTMIB_SUBAGENT(1)					      Virtualization Support					    LIBVIRTMIB_SUBAGENT(1)

NAME
libvirtMib_subagent - SNMP subagent for libvirt SYNOPSIS
libvirtMib_subagent [OPTIONS] [LISTENING ADDRESSES] DESCRIPTION
The libvirtMib_subagent provides SNMP functionality for libvirt. Therefore it is now possible to gather and set domain status over SNMP from one place. This allows to create views of entire platforms end to end. It communicates with SNMP agent over AgentX protocol (RFC 2741) and extends agent's set of infomation provided. Therefore, we need a running SNMP agent. This behaviour can be avoided using -M option. The libvirtMib_subagent understands these OPTIONS: -f Don't fork. Run in foreground. -D[token[,...]] Turn on debugging output for the given TOKEN(s). Without any tokens specified, it defaults to printing all the tokens (which is equivalent to the keyword '"ALL"'). You might want to try ALL for extremely verbose output. Note: You can't put a space between the -D and the tokens. -H Display a list of configuration file directives understood by the agent and then exit. -M Run as a normal SNMP Agent instead of an AgentX sub-agent. -xADDRESS Connect to master agent at ADDRESS (default "/var/agentx/master"). The address can either be a Unix domain socket path, or the address of a network interface. The format is the same as the format of listening addresses described below. -L Do not open a log file; print all messages to stderr. The last optional LISTENING ADDRESSES specify on which addresses should subagent running in normal SNMP Agent mode listen for incoming requests. See snmpd for further information. BUGS
Report any bugs discovered to the libvirt community via the mailing list "http://libvirt.org/contact.html" or bug tracker "http://libvirt.org/bugs.html". Alternatively report bugs to your software distributor / vendor. AUTHORS
Please refer to the AUTHORS file distributed with libvirt. COPYRIGHT
Copyright (C) 2011 Red Hat, Inc., and the authors listed in the libvirt-snmp AUTHORS file. LICENSE
libvirt-snmp is distributed under the terms of the GNU GPL v3. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE SEE ALSO snmpd, <;http://www.libvirt.org> libvirt-snmp-0.0.3 2012-09-07 LIBVIRTMIB_SUBAGENT(1)