ISOMAN

CVE

CVE-2020-15708

Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.

Severity
CRITICAL
CVSS
9.3
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. https://usn.ubuntu.com/usn/usn-4452-1
  2. https://usn.ubuntu.com/usn/usn-4452-1