CVE-2021-3667

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
n/a	libvirt	Fixedin - libvert v7.6.0-rc1 and above

References

https://bugzilla.redhat.com/show_bug.cgi?id=1986094Issue Tracking, Vendor Advisory
https://gitlab.com/libvirt/libvirt/-/commit/447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87Patch, Third Party Advisory
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/202210-06Third Party Advisory
https://security.netapp.com/advisory/ntap-20220331-0005/Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1986094Issue Tracking, Vendor Advisory
https://gitlab.com/libvirt/libvirt/-/commit/447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87Patch, Third Party Advisory
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/202210-06Third Party Advisory
https://security.netapp.com/advisory/ntap-20220331-0005/Third Party Advisory

Timeline

Published: Mar 2, 2022
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-366865.4Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.CVE-2021-366895.5An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attackers to view sensitive i CVE-2021-36695.5A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which coul CVE-2021-366907.5A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a c CVE-2021-366917.5libjxl v0.5.0 is affected by a Assertion failed issue in lib/jxl/image.cc jxl::PlaneBase::PlaneBase(). When encoding a malicous GIF file usi CVE-2021-366926.5libjxl v0.3.7 is affected by a Divide By Zero in issue in lib/extras/codec_apng.cc jxl::DecodeImageAPNG(). When encoding a malicous APNG fil CVE-2021-366955.4Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the downl CVE-2021-366965.4Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in social me CVE-2021-366976.7With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess CVE-2021-366985.4Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.CVE-2021-36706.5MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-367019.1In htmly version 2.8.1, is vulnerable to an Arbitrary File Deletion on the local host when delete backup files. The vulnerability may allow