CVE-2022-0897CWE-667

A flaw was found in the libvirt nwfilter driver

published March 25, 2022

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01049 · 63.9th percentile
Weakness
CWE-667 · Improper Locking
Published
2022-03-25T00:00Z
EPSS history
Timeline
  • 25 MAR 00:00Z
    A flaw was found in the libvirt nwfilter driver
    cvelistv5