CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

• CWE-772
• CWE-772

• https://bugzilla.redhat.com/show_bug.cgi?id=1860069Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202101-22Third Party Advisory
• https://security.gentoo.org/glsa/202210-06Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1860069Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202101-22Third Party Advisory
• https://security.gentoo.org/glsa/202210-06Third Party Advisory

Published

Dec 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14333A flaw was found in Ovirt Engine's web interface in ovirt 4.…6.1
• CVE-2020-14334A flaw was found in Red Hat Satellite 6 which allows privile…8.8
• CVE-2020-14335A flaw was found in Red Hat Satellite, which allows a privil…5.5
• CVE-2020-14336A flaw was found in the Restricted Security Context Constrai…6.5
• CVE-2020-14337A data exposure flaw was found in Tower, where sensitive dat…5.8
• CVE-2020-14338A flaw was found in Wildfly's implementation of Xerces, spec…5.3
• CVE-2020-1434An elevation of privilege vulnerability exists in the way th…5.3
• CVE-2020-14340A vulnerability was discovered in XNIO where file descriptor…5.9
• CVE-2020-14341The "Test Connection" available in v7.x of the Red Hat Singl…2.7
• CVE-2020-14342It was found that cifs-utils' mount.cifs was invoking a shel…7
• CVE-2020-14343A vulnerability was discovered in the PyYAML library in vers…9.8
• CVE-2020-14344An integer overflow leading to a heap-buffer overflow was fo…6.7