CVE-2013-4401

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-02 · updated 2026-06-16
Weakness: CWE-264

Description

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained from third party information.

Affected products

libvirt: 1.1.0, 1.1.1, 1.1.2, 1.1.3

References

http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c
http://secunia.com/advisories/55210
http://secunia.com/advisories/60895
http://security.gentoo.org/glsa/glsa-201412-04.xml
http://wiki.libvirt.org/page/Maintenance_Releases
http://www.securitytracker.com/id/1029241
http://www.ubuntu.com/usn/USN-2026-1
https://bugzilla.redhat.com/show_bug.cgi?id=1015259
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c
http://secunia.com/advisories/55210
http://secunia.com/advisories/60895
http://security.gentoo.org/glsa/glsa-201412-04.xml

Get alerted when CVE-2013-4401 or the next vulnerability affects your stack