CVE-2016-5008 libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC sessi...
CriticalCVSS 9.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libvirt(Debian:12) | < 2.0.0-1 | 2.0.0-1 |
| debian/libvirt(Debian:13) | < 2.0.0-1 | 2.0.0-1 |
| debian/libvirt(Debian:14) | < 2.0.0-1 | 2.0.0-1 |
| redhat libvirt | <= 1.3.5 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-5008 vendor-advisory
- openSUSE-SU-2016:1809 vendor-advisory
- openSUSE-SU-2016:1810 vendor-advisory
- openSUSE-SU-2016:1975 vendor-advisory
- RHSA-2016:2577 vendor-advisory
- security.libvirt.org vendor-advisory
- DSA-3613 vendor-advisory
- 91562 vdb-entry
- bugzilla.redhat.com
- FEDORA-2016-65cc608ebe vendor-advisory
- FEDORA-2016-7b7e16a39e vendor-advisory
- USN-3576-1 vendor-advisory