CVE-2018-6764 — libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init

Back Back to CVE browser

HIGH

libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init

Published Feb 23, 2018

7.8

HIGH

CVSS 3.0

EPSS 0.33%

Description

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

Affected products

Red Hat Enterprise Linux 7

libvirt-0:4.5.0-10.el7

Fixed · RHSA-2018:3113
Red Hat Enterprise Linux 5

libvirt

Not affected
Red Hat Enterprise Linux 6

libvirt

Not affected
Red Hat Enterprise Linux 8

libvirt

Not affected
Red Hat Storage 3

libvirt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	libvirt-0:4.5.0-10.el7	Fixed	RHSA-2018:3113
Red Hat Enterprise Linux 5	libvirt	Not affected	n/a
Red Hat Enterprise Linux 6	libvirt	Not affected	n/a
Red Hat Enterprise Linux 8	libvirt	Not affected	n/a
Red Hat Storage 3	libvirt	Not affected	n/a

Remediation

No remediation recorded yet.

Metrics

0.33% 0.00325

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00325

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.33% (0.00325)	23.24th	v5 (v2026.06.15)
Jun 15, 2026	0.34% (0.00337)	25.27th	v5 (v2026.06.15)
Mar 17, 2025	0.04% (0.00038)	8.28th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00059)	26.93th	v3 (v2023.03.01)
May 25, 2024	0.06% (0.00059)	24.81th	v3 (v2023.03.01)
Mar 7, 2023	0.06% (0.00059)	22.80th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00950)	32.28th	v2 (v2022.01.01)
Sep 10, 2022	0.95% (0.00950)	30.63th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00950)	28.61th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00950)	13.46th	v2 (v2022.01.01)
Feb 3, 2022	1.82% (0.01819)	35.19th	v1
Jan 6, 2022	1.82% (0.01819)	34.49th	v1
Sep 1, 2021	1.82% (0.01819)	74.60th	v1
Apr 14, 2021	1.82% (0.01819)	0.00th	v1

Weaknesses (2)

CWE-179

CWE-346

References (8)

http://www.ubuntu.com/usn/USN-3576-1
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:3113
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-6764
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1541444
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-6764
https://www.cve.org/CVERecord?id=CVE-2018-6764
https://www.debian.org/security/2018/dsa-4137
vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.redhat.com/archives/libvir-list/2018-February/msg00239.html
mailing-listx_refsource_MLISTPatchThird Party Advisory

Link	Providers	Tags
http://www.ubuntu.com/usn/USN-3576-1		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:3113		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-6764		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1541444		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-6764
https://www.cve.org/CVERecord?id=CVE-2018-6764
https://www.debian.org/security/2018/dsa-4137		vendor-advisoryx_refsource_DEBIANThird Party Advisory
https://www.redhat.com/archives/libvir-list/2018-February/msg00239.html		mailing-listx_refsource_MLISTPatchThird Party Advisory