Homepage

Double Free The advisory has been revoked - it doesn't affect any version of package libguestfs-inspect-icons  (opens in a new tab)

Threat Intelligence

EPSS
0.53% (41st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-LIBGUESTFSINSPECTICONS-1479232
  • published26 Jul 2021
  • disclosed30 Sept 2020
Report a new vulnerability Found a mistake?

Introduced: 30 Sep 2020

CVE-2020-25637  (opens in a new tab)
CWE-415  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libguestfs-inspect-icons package and not the libguestfs-inspect-icons package as distributed by RHEL.

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.