Threats tagged 'ghsa-f6jp-rhmm-v59g'

An injection vulnerability exists in libvirt's virtual network driver due to improper handling of newline characters in DNS TXT and SRV record attributes. This flaw allows users with permission to define virtual networks to inject arbitrary dnsmasq configuration directives, potentially leading to arbitrary command execution as root. The vulnerability has a medium severity score and affects multiple versions of libvirt. A patch is available to address this issue.