解决了

有人能从Nutanix评论libvirt的安全问题吗?

  • 2014年5月19日
  • 1回复
  • 2976的浏览量
K
徽章 ＋４
我知道这是一个Mandriva通知，但我认为CentOS也受到了影响。_______________________________________________________________________ Mandriva Linux安全顾问MDVSA-2014:097 http://www.mandriva.com/en/support/security / _______________________________________________________________________ 包:libvirt日期:2014年5月16日的影响:业务服务器1.0 _______________________________________________________________________ 问题描述:在libvirt多个漏洞被发现和纠正:libvirt 1.0.1到1.2.1中的LXC驱动(LXC /lxc_driver.c)允许本地用户(1)通过virdomaindevicedetach API删除任意主机设备，并对容器中的/dev进行符号链接攻击;(2)通过virDomainDeviceAttach API创建任意节点(mknod)，并对容器中的/dev进行符号链接攻击;通过(3)virDomainShutdown或(4)virDomainReboot API导致拒绝服务(关闭或重启主机操作系统)，并对容器中的/dev/initctl进行符号链接攻击，这与/proc//root下的路径和virInitctlSetRunLevel函数有关(CVE-2013-6456)。libvirt被打了补丁，以防止在解析XML文件时扩展实体。该漏洞允许恶意用户读取任意文件或导致拒绝服务(CVE-2014-0179)。更新后的包已经升级到1.1.3.5版本，并打了补丁，以纠正这些问题。_______________________________________________________________________ 引用: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179 http://security.libvirt.org/2014/0003.html http://lists.opensuse.org/opensuse-updates/2014-05/msg00048.html _______________________________________________________________________
图标

最佳答案shuguet2014年5月19日，11:43

\nBut what I can tell you is that the version of libvirt deployed on the CVM does not seems to be impacted.
\nThe CVEs you mention and the Libvirt advisories both refers to versions 1.0.1 or later of libvirt.
\n
\nBut the CVMs (as of the latest publicly available release, 3.5.3.1) uses the version 0.10.2:
\nnutanix@cvm$ ls -la \/usr\/lib64\/libvirt.so.0lrwxrwxrwx. 1 root root 17 Apr 3 15:14 \/usr\/lib64\/libvirt.so.0 -> libvirt.so.0.10.2<\/b>
\nnutanix@cvm$ virsh --version=longVirsh command line tool of libvirt 0.10.2<\/b>See web site at http:\/\/libvirt.org\/
\nCompiled with support for:Hypervisors: QEMU\/KVM LXC ESX TestNetworking: Remote Network Bridging Interface netcf Nwfilter VirtualPortStorage: Dir Disk Filesystem SCSI Multipath iSCSI LVMMiscellaneous: Daemon Nodedev SELinux Secrets Debug DTrace Readline
\n
\nEdit: There is a dormant flaw starting at version 0.0.5, and activated after 0.7.5, that may allow denial of service. But the major threat is the privileged information disclosure, and that is only after version 1.0.0.
\nIn any case, both flaws can only be activated via local access to the Nutanix configuration.
\n
\nSylvain.","className":"post__content__best_answer"}">
查看原始

    1回复

    shuguet
    Userlevel 4
    徽章 + 20
    我不是来自Nutanix，所以你可能仍然想要等待一个答案(尽管如果你真的需要，我会提出一个支持案例，有一个官方声明)。
    但是我可以告诉你的是，部署在CVM上的libvirt版本似乎没有受到影响。
    您提到的cve和Libvirt建议都是指Libvirt的1.0.1或更高版本。

    但是cvm(从最新的公开版本3.5.3.1开始)使用的是0.10.2版本:
    nutanix@cvm$ ls -la /usr/lib64/libvirt.so.0lrwxrwxrwx. zip . zip . zip1 root root 17 Apr 3 15:14 /usr/lib64/libvirt.so. log . log . log . log。0 - > libvirt.so。0.10.2
    nutanix@cvm$ virsh——version=longVirsh libvirt命令行工具0.10.2网址:http://libvirt.org/
    支持:hypervisor: QEMU/KVM LXC ESX TestNetworking: Remote Network Bridging Interface netcf Nwfilter VirtualPortStorage: Dir Disk Filesystem SCSI Multipath iSCSI LVMMiscellaneous: Daemon Nodedev SELinux Secrets Debug DTrace Readline

    编辑:有一个休眠缺陷，从0.0.5版本开始，在0.7.5之后激活，这可能会允许拒绝服务。但主要的威胁是特权信息的泄露，这只是在版本1.0.0之后。
    在任何情况下，这两个缺陷只能通过本地访问Nutanix配置激活。

    Sylvain。
    Sylvain Huguet - 2x Nutanix技术冠军2015-2016，法国Nutanix连接章节冠军，法国VMUG领袖，6x VMware vExpert 2011 -2016
    \nBut what I can tell you is that the version of libvirt deployed on the CVM does not seems to be impacted.
    \nThe CVEs you mention and the Libvirt advisories both refers to versions 1.0.1 or later of libvirt.
    \n
    \nBut the CVMs (as of the latest publicly available release, 3.5.3.1) uses the version 0.10.2:
    \nnutanix@cvm$ ls -la \/usr\/lib64\/libvirt.so.0lrwxrwxrwx. 1 root root 17 Apr 3 15:14 \/usr\/lib64\/libvirt.so.0 -> libvirt.so.0.10.2<\/b>
    \nnutanix@cvm$ virsh --version=longVirsh command line tool of libvirt 0.10.2<\/b>See web site at http:\/\/libvirt.org\/
    \nCompiled with support for:Hypervisors: QEMU\/KVM LXC ESX TestNetworking: Remote Network Bridging Interface netcf Nwfilter VirtualPortStorage: Dir Disk Filesystem SCSI Multipath iSCSI LVMMiscellaneous: Daemon Nodedev SELinux Secrets Debug DTrace Readline
    \n
    \nEdit: There is a dormant flaw starting at version 0.0.5, and activated after 0.7.5, that may allow denial of service. But the major threat is the privileged information disclosure, and that is only after version 1.0.0.
    \nIn any case, both flaws can only be activated via local access to the Nutanix configuration.
    \n
    \nSylvain.","quoteUsername":"shuguet","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    回复


    Baidu