CVE-2026-61477

low

Published 2026-08-07 · Modified 2026-08-07

Discuss on Community Propose mitigation

CVSS v3

2.3

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

CVSS v4 NEW

—

not yet in upstream

VIR risk

2.3

Description

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.

Predictions

Exploit likelihood

25%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2026-61477 NameCVE-2026-61477 SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Vulnerable and fixed packages The table below lists information on source packages. Source PackageReleaseVersionStatus libvirt (PTS)bullseye7.0.0-3+deb11u3vulnerable bullseye…

CVE-2026-61477

Name	CVE-2026-61477
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libvirt (PTS)	bullseye	7.0.0-3+deb11u3	vulnerable
	bullseye (security)	7.0.0-3+deb11u4	vulnerable
	bookworm	9.0.0-4+deb12u2	vulnerable
	trixie	11.3.0-3+deb13u2	vulnerable
	forky	12.5.0-1	vulnerable
	sid	12.6.0-1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libvirt	source	(unstable)	(unfixed)

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=2512068
wait and update entry once RH has updated records, reference upstream issue

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=2512068wait and update entry once RH has updated records, reference upstream issue

OS impact

Debian Affected 5 releases

Version	Status	Fixed in
trixie	Affected	—
sid	Affected	—
forky	Affected	—
bullseye	Affected	—
bookworm	Affected	—

References

CWEs

CWE-93

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.