Nixpkgs security tracker
Permalink
CVE-2026-61477
2.3 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): High (H)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): High (H)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
14 packages
- libvirt-dbus
- libvirt-glib
- python313Packages.libvirt
- rubyPackages.ruby-libvirt
- ocamlPackages.ocaml_libvirt
- prometheus-libvirt-exporter
- terraform-providers.libvirt
- rubyPackages_3_3.ruby-libvirt
- rubyPackages_3_4.ruby-libvirt
- rubyPackages_4_0.ruby-libvirt
- python313Packages.libvirt-python
- python314Packages.libvirt-python
- ocamlPackages_latest.ocaml_libvirt
- terraform-providers.dmacvicar_libvirt
- @LeSuisse restored package python313Packages.libvirt-python
-
@LeSuisse
ignored
2 packages
- python313Packages.libvirt-python
- python314Packages.libvirt
- @LeSuisse accepted
- @LeSuisse published on GitHub
Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
References
Affected products
libvirt
virt:rhel/libvirt
Matching in nixpkgs
Ignored packages (15)
pkgs.libvirt-dbus
libvirt D-Bus API binding
pkgs.libvirt-glib
Wrapper library of libvirt for glib-based applications
pkgs.python313Packages.libvirt
None
pkgs.python314Packages.libvirt
None
pkgs.rubyPackages.ruby-libvirt
None
pkgs.ocamlPackages.ocaml_libvirt
OCaml bindings for libvirt
pkgs.prometheus-libvirt-exporter
Prometheus metrics exporter for libvirt
pkgs.terraform-providers.libvirt
None
pkgs.rubyPackages_3_3.ruby-libvirt
None
pkgs.rubyPackages_3_4.ruby-libvirt
None
pkgs.rubyPackages_4_0.ruby-libvirt
None
pkgs.python313Packages.libvirt-python
Libvirt Python bindings
-
nixos-unstable -
- nixos-unstable-small 12.4.0
pkgs.python314Packages.libvirt-python
Libvirt Python bindings
-
nixos-unstable -
- nixos-unstable-small 12.4.0
pkgs.ocamlPackages_latest.ocaml_libvirt
OCaml bindings for libvirt
Package maintainers
-
@fpletz Franz Pletz <fpletz@fnordicwalking.de>
-
@phip1611 Philipp Schuster <phip1611@gmail.com>
-
@lovesegfault Bernardo Meurer <meurerbernardo@gmail.com>