CVE-2021-3631
Last modified
CVE-2021-3631 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Libvirt | < 7.5.0 |
| Redhat | Openshift Container Platform | 4.8 |
| Redhat | Enterprise Linux | 8.0 |
| Netapp | Ontap Select Deploy Administration Utility | All versions |
References
- https://access.redhat.com/errata/RHSA-2021:3631Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1977726Issue Tracking, Vendor Advisory
- https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2Patch, Third Party Advisory
- https://gitlab.com/libvirt/libvirt/-/issues/153Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202210-06Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220331-0010/Third Party Advisory
- https://access.redhat.com/errata/RHSA-2021:3631Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1977726Issue Tracking, Vendor Advisory
- https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2Patch, Third Party Advisory
- https://gitlab.com/libvirt/libvirt/-/issues/153Exploit, Third Party Advisory
- https://security.gentoo.org/glsa/202210-06Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220331-0010/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-3631?
How severe is CVE-2021-3631?
How do I fix CVE-2021-3631?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36302All Dell EMC Integrated System for Microsoft Azure Stack Hub…9.9
- CVE-2021-36305Dell PowerScale OneFS contains an Unsynchronized Access to S…6.5
- CVE-2021-36306Networking OS10, versions prior to October 2021 with RESTCON…9.8
- CVE-2021-36307Networking OS10, versions prior to October 2021 with RESTCON…8.8
- CVE-2021-36308Networking OS10, versions prior to October 2021 with Smart F…9.8
- CVE-2021-36309Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contai…6.5
- CVE-2021-36310Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x …4.9
- CVE-2021-36311Dell EMC Networker versions prior to 19.5 contain an Imprope…7.8
- CVE-2021-36312Dell EMC CloudLink 7.1 and all prior versions contain a Hard…9.1
- CVE-2021-36313Dell EMC CloudLink 7.1 and all prior versions contain an OS …7.2
- CVE-2021-36314Dell EMC CloudLink 7.1 and all prior versions contain an Arb…9.8
- CVE-2021-36315Dell EMC PowerScale Nodes contain a hardware design flaw. Th…6.8
Are you affected by CVE-2021-3631?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST