CVE-2020-15708

CRITICAL

Ubuntu 20.04 LTS - Incorrect Permission Assignment for Critical Resource in libvirt Control Socket

Title source: llm

Description

Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://usn.ubuntu.com/usn/usn-4452-1

Scores

CVSS v3 9.3

EPSS 0.0038

EPSS Percentile 30.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-732

Status published

Products (1)

canonical/ubuntu_linux 20.04

Published Nov 06, 2020

Tracked Since Feb 18, 2026