Every CVE Search/ Get API key

CVE-2019-3831

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8....

6.4 MediumFix available

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.03%Up 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.4

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Record
CVE-2019-3831
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2019-13451 6.4

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Record
EUVD-2019-13451
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-mgfj-qcpq-xx99 6.7

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8....

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Record
GHSA-mgfj-qcpq-xx99
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 6.7

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Record
CVE-2019-3831
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
9.0 HighAV:N/AC:L/Au:S/C:C/I:C/A:C
Weakness
CWE-863
Updated
2026-11-02
OSV 6.7

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Record
CVE-2019-3831
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2019:1965 6.4

Red Hat Bug Fix Advisory: vdsm bug fix update

Record
RHBA-2019:1965
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:0457 8.0

Red Hat Security Advisory: redhat-virtualization-host security update

Record
RHSA-2019:0457
CVSS 3.0
8.0 HighCVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:0458 6.4

Red Hat Security Advisory: vdsm security and bug fix update

Record
RHSA-2019:0458
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ioprocess
Red Hat:storage:3.4:server:el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
ioprocess-debuginfo
Red Hat:storage:3.4:server:el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
python2-ioprocess
Red Hat:storage:3.4:server:el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
safelease
Red Hat:storage:3.4:server:el7
 before 0:1.0-7.el7ev
0:1.0-7.el7ev
safelease-debuginfo
Red Hat:storage:3.4:server:el7
 before 0:1.0-7.el7ev
0:1.0-7.el7ev
vdsm
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-api
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-client
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-common
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-gluster
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
Show 40 moreShow less
Affected packages
PackageAffectedFixed
vdsm-hook-cpuflags
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-ethtool-options
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-faqemu
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-fcoe
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-localdisk
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-macspoof
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-openstacknet
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-qemucmdline
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-hook-vmfex-dev
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-http
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-jsonrpc
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-network
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-python
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-tests
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
vdsm-yajsonrpc
Red Hat:storage:3.4:server:el7
 before 0:4.30.18-1.0.el7rhgs
0:4.30.18-1.0.el7rhgs
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:4.2-20190219.0.el7_6
0:4.2-20190219.0.el7_6
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:4.2-20190219.0.el7_6
0:4.2-20190219.0.el7_6
redhat-release-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:4.2-8.3.el7
0:4.2-8.3.el7
redhat-virtualization-host-image-update-placeholder
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 3 CVEs
 before 0:4.2-8.3.el7
0:4.2-8.3.el7
vdsm
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-api
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-client
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-common
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-gluster
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-checkips
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-cpuflags
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-ethtool-options
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-extra-ipv4-addrs
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-fcoe
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-localdisk
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-macspoof
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-nestedvt
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-openstacknet
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-vhostmd
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-hook-vmfex-dev
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-http
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-jsonrpc
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-network
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-python
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev
vdsm-yajsonrpc
Red Hat:enterprise_linux:7::hypervisor
 before 0:4.20.47-1.el7ev
0:4.20.47-1.el7ev

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-3831 is a medium vulnerability (CVSS 6.4) in [unknown] Vdsm, published March 25, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. Fixed in ioprocess 0:1.1.2-1.el7ev.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open