CVE-2011-4600

NameCVE-2011-4600
DescriptionThe networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libvirt (PTS)stretch3.0.0-4+deb9u4fixed
stretch (security)3.0.0-4+deb9u5fixed
buster5.0.0-4+deb10u1fixed
bullseye7.0.0-3fixed
bookworm, sid8.4.0-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libvirtsourcesqueeze(unfixed)end-of-life
libvirtsource(unstable)0.9.9-1low

Notes

[squeeze] - libvirt <end-of-life> (Unsupported in squeeze-lts)

Search for package or bug name: Reporting problems