← back
CVE-2020-15708

Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability

CVSS 9.3 CRITICALEPSS 0.4%CWE-732
Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Ubuntu · libvirt

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →