NetSight
medium6.7

CVE-2019-3831

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8.

Impact

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

Affected products

VendorProductAffected versions
OvirtVdsm
from 4.19 through 4.30.3
from 4.30.5 through 4.30.8
RedhatGluster Storage
Version 3.0

Weakness classification

References