CVE-2019-3831

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-3831
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3831.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-3831
Downstream
Published
2019-03-25T18:29:00.933Z
Modified
2026-04-02T02:08:10.859065Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

References

Affected packages

Git / github.com/ovirt/vdsm

Affected ranges

Type
GIT
Repo
https://github.com/ovirt/vdsm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
61e4716cf3e13f3fd9547a9d8be776a593803f32
Introduced
0d9505b561b9d03b02fac49fbf9cc509787b91b2
Last affected
a2dc14e05cd08e7307ecfee22097b85696089bf2
Database specific 
{
    "versions": [
        {
            "introduced": "4.19"
        },
        {
            "last_affected": "4.30.3"
        },
        {
            "introduced": "4.30.5"
        },
        {
            "last_affected": "4.30.8"
        }
    ]
}

Affected versions

4.*
4.18.19
4.19.49
ovirt-3.*
ovirt-3.3.2
v4.*
v4.10.0
v4.10.1
v4.10.2
v4.10.3
v4.11.0
v4.11.1
v4.12.0
v4.12.0-rc1
v4.12.0-rc2
v4.12.0-rc3
v4.12.1
v4.12.2
v4.13.0
v4.13.1
v4.13.2
v4.13.3
v4.13.3.1
v4.13.4
v4.14.0
v4.14.1
v4.14.10
v4.14.11
v4.14.11.1
v4.14.11.2
v4.14.12
v4.14.13
v4.14.14
v4.14.15
v4.14.16
v4.14.17
v4.14.2
v4.14.3
v4.14.4
v4.14.5
v4.14.6
v4.14.7
v4.14.8
v4.14.8.1
v4.14.9
v4.15.0
v4.16.0
v4.16.1
v4.16.10
v4.16.11
v4.16.12
v4.16.13
v4.16.14
v4.16.15
v4.16.16
v4.16.17
v4.16.18
v4.16.19
v4.16.2
v4.16.20
v4.16.21
v4.16.22
v4.16.23
v4.16.24
v4.16.25
v4.16.26
v4.16.27
v4.16.28
v4.16.29
v4.16.3
v4.16.30
v4.16.31
v4.16.32
v4.16.33
v4.16.34
v4.16.35
v4.16.36
v4.16.37
v4.16.38
v4.16.4
v4.16.5
v4.16.6
v4.16.7
v4.16.8
v4.16.9
v4.17.0
v4.17.1
v4.17.10
v4.17.10.1
v4.17.11
v4.17.12
v4.17.13
v4.17.14
v4.17.15
v4.17.16
v4.17.17
v4.17.18
v4.17.19
v4.17.2
v4.17.20
v4.17.21
v4.17.22
v4.17.23
v4.17.23.1
v4.17.23.2
v4.17.24
v4.17.25
v4.17.26
v4.17.27
v4.17.28
v4.17.29
v4.17.3
v4.17.30
v4.17.31
v4.17.32
v4.17.33
v4.17.34
v4.17.35
v4.17.36
v4.17.37
v4.17.38
v4.17.39
v4.17.4
v4.17.40
v4.17.41
v4.17.42
v4.17.43
v4.17.43.1
v4.17.44
v4.17.5
v4.17.6
v4.17.7
v4.17.8
v4.17.9
v4.17.999
v4.18.0
v4.18.1
v4.18.10
v4.18.11
v4.18.12
v4.18.13
v4.18.14
v4.18.15
v4.18.15.1
v4.18.15.2
v4.18.15.3
v4.18.16
v4.18.17
v4.18.18
v4.18.2
v4.18.20
v4.18.21
v4.18.21.1
v4.18.22
v4.18.23
v4.18.24
v4.18.25
v4.18.3
v4.18.4
v4.18.4.1
v4.18.5
v4.18.5.1
v4.18.6
v4.18.7
v4.18.8
v4.18.9
v4.18.999
v4.19.1
v4.19.10
v4.19.10.1
v4.19.11
v4.19.12
v4.19.13
v4.19.14
v4.19.15
v4.19.16
v4.19.17
v4.19.18
v4.19.19
v4.19.2
v4.19.20
v4.19.21
v4.19.22
v4.19.23
v4.19.24
v4.19.25
v4.19.26
v4.19.27
v4.19.28
v4.19.29
v4.19.3
v4.19.30
v4.19.31
v4.19.32
v4.19.33
v4.19.34
v4.19.35
v4.19.36
v4.19.37
v4.19.38
v4.19.39
v4.19.4
v4.19.40
v4.19.41
v4.19.42
v4.19.43
v4.19.44
v4.19.45
v4.19.46
v4.19.47
v4.19.48
v4.19.49
v4.19.5
v4.19.50
v4.19.51
v4.19.6
v4.19.7
v4.19.8
v4.19.9
v4.20.0
v4.20.1
v4.20.10
v4.20.11
v4.20.12
v4.20.13
v4.20.14
v4.20.15
v4.20.16
v4.20.17
v4.20.18
v4.20.19
v4.20.2
v4.20.20
v4.20.21
v4.20.22
v4.20.23
v4.20.24
v4.20.25
v4.20.26
v4.20.27
v4.20.27.1
v4.20.28
v4.20.29
v4.20.3
v4.20.30
v4.20.31
v4.20.32
v4.20.33
v4.20.34
v4.20.35
v4.20.36
v4.20.37
v4.20.38
v4.20.39
v4.20.39.1
v4.20.4
v4.20.40
v4.20.41
v4.20.42
v4.20.43
v4.20.44
v4.20.45
v4.20.46
v4.20.47
v4.20.48
v4.20.49
v4.20.5
v4.20.6
v4.20.7
v4.20.8
v4.20.9
v4.20.9.1
v4.20.9.2
v4.20.9.3
v4.30.0
v4.30.1
v4.30.2
v4.30.3
v4.30.5
v4.30.6
v4.30.7
v4.30.8
v4.9.0
v4.9.1
v4.9.2
v4.9.3
v4.9.3.1
v4.9.3.2
v4.9.3.3
v4.9.4
v4.9.5
v4.9.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3831.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.0"
            }
        ]
    }
]