util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.
The product does not properly verify that the source of data or communication is valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvirt | Redhat | - (including) | - (including) |
| Red Hat Enterprise Linux 7 | RedHat | libvirt-0:4.5.0-10.el7 | * |
| Libvirt | Ubuntu | artful | * |
| Libvirt | Ubuntu | devel | * |
| Libvirt | Ubuntu | xenial | * |