{"id":"CVE-2011-4600","aliases":["DEBIAN-CVE-2011-4600","EUVD-2011-4524","GHSA-r2xr-35cg-68vv","RHBA-2012:0013","UBUNTU-CVE-2011-4600","USN-2867-1","openSUSE-SU-2024:10209-1"],"status":"published","title":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does...","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01783,"percentile":0.78426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2011-12-31T00:00:00Z","modified":"2026-10-23T18:02:49Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["0.9.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["0.9.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["0.9.9-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-client","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-debuginfo","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-devel","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-python","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-lock-sanlock","fixed_in":["0:0.9.4-23.el6_2.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.9-1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:6.2::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-23.el6_2.4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.16"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":32}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"http://libvirt.org/news-2012.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760442","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.ubuntu.com/usn/USN-2867-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4600","tags":["advisory"]},{"url":"http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=ae1232b298323dd7bef909426e2ebafa6bca9157"},{"url":"https://github.com/advisories/GHSA-r2xr-35cg-68vv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4600","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2012:0013","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2011-4127.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1849.html","tags":["article"]},{"url":"https://access.redhat.com/kb/docs/DOC-67874","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/libvirt.html#RHBA-2012-0013","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=759061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=769674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=770959","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhba-2012_0013.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=765964","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4600","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2011-4600","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2867-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5313","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2011-4600","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2016-04-14T15:00:00Z","modified":"2024-08-07T00:09:19.397Z","updated_at":"2026-11-02T14:35:37.671707Z"}],"euvd":[{"id":"EUVD-2011-4524","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2016-04-14T15:00:00Z","modified":"2024-08-07T00:09:19Z","updated_at":"2026-11-03T01:39:48.540824Z"}],"ghsa":[{"id":"GHSA-r2xr-35cg-68vv","title":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does...","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2022-05-17T03:56:55Z","modified":"2023-02-13T03:30:23Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2011-4600","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2016-04-14T15:59:00.12Z","modified":"2026-06-16T23:35:07.23Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"CVE-2011-4600","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2016-04-14T15:59:00Z","modified":"2026-04-10T03:42:05.569575Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-4600","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"published","published":"2016-04-14T15:59:00.12Z","modified":"2026-10-23T18:02:49.207323545Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"UBUNTU-CVE-2011-4600","description":"The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.","status":"withdrawn","published":"2011-12-31T00:00:00Z","modified":"2026-02-04T04:04:32.876942Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:06.395274Z"},{"id":"openSUSE-SU-2024:10209-1","title":"libvirt-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:02.434926Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHBA-2012:0013","title":"Red Hat Bug Fix Advisory: libvirt bug fix and enhancement update","status":"published","published":"2024-09-15T19:38:06Z","modified":"2026-06-26T12:21:40.434743081Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"USN-2867-1","title":"libvirt vulnerabilities","description":"It was discovered that libvirt incorrectly handled the firewall rules on\nbridge networks when the daemon was restarted. This could result in an\nunintended firewall configuration. This issue only applied to Ubuntu 12.04\nLTS. (CVE-2011-4600)\n\nPeter Krempa discovered that libvirt incorrectly handled locking when\ncertain ACL checks failed. A local attacker could use this issue to cause\nlibvirt to stop responding, resulting in a denial of service. This issue\nonly applied to Ubuntu 14.04 LTS. (CVE-2014-8136)\n\nLuyao Huang discovered that libvirt incorrectly handled VNC passwords in\nshapshot and image files. A remote authenticated user could use this issue\nto possibly obtain VNC passwords. This issue only affected Ubuntu 14.04\nLTS. (CVE-2015-0236)\n\nHan Han discovered that libvirt incorrectly handled volume creation\nfailure when used with NFS. A remote authenticated user could use this\nissue to cause libvirt to crash, resulting in a denial of service. This\nissue only applied to Ubuntu 15.10. (CVE-2015-5247)\n\nOssi Herrala and Joonas Kuorilehto discovered that libvirt incorrectly\nperformed storage pool name validation. A remote authenticated user could\nuse this issue to bypass ACLs and gain access to unintended files. This\nissue only applied to Ubuntu 14.04 LTS, Ubuntu 15.04 and Ubuntu 15.10.\n(CVE-2015-5313)\n","status":"published","published":"2016-01-12T18:06:25Z","modified":"2026-04-22T09:20:26.697451Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}