CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...

5.4 MediumFix available

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: None
Availability: Low

Exploit likelihood

1.12%Down 0.9 points since Apr 14, 2021

What each source reports

CVE List Score used 5.4

Record: CVE-2019-3886
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness: CWE-862
Updated: 2026-11-02

EUVDEUVD-2019-13496 5.4

Record: EUVD-2019-13496
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wxvx-hq9w-75x9 5.4

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...

Record: GHSA-wxvx-hq9w-75x9
CVSS 3.1: 5.4 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness: CWE-862
Updated: 2026-11-02

NVD 5.4

Record: CVE-2019-3886
CVSS 3.1: 5.4 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS 3.0: 5.4 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS 2.0: 4.8 MediumAV:A/AC:L/Au:N/C:P/I:N/A:P
Weakness: CWE-862
Updated: 2026-11-02

OSV 5.4

Record: CVE-2019-3886
CVSS 3.1: 5.4 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-3886 5.4

Record: DEBIAN-CVE-2019-3886
CVSS 3.1: 5.4 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Updated: 2026-11-02

Show 8 moreShow less

OSVRHBA-2019:3723 7.0

Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update

Record: RHBA-2019:3723
CVSS 3.0: 7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
Updated: 2026-11-02

OSVMGASA-2019-0390 No score

Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities:

An information leak which allowed to retrieve the guest hostname under readonly mode (CVE-2019-3886).

Wrong permissions in systemd admin-sock due to missing SocketMode parameter (CVE-2019-10132).

Arbitrary file read/exec via virDomainSaveImageGetXMLDesc API (CVE-2019-10161).

virDomainManagedSaveDefineXML API exposed to readonly clients (CVE-2019-10166).

Arbitrary command execution via virConnectGetDomainCapabilities API (CVE-2019-10167).

Arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs (CVE-2019-10168).

Also, this update contains the libvirt adjustments, that pass through the new 'md-clear' CPU flag, to help address Intel CPU speculative execution flaws.

Record: MGASA-2019-0390
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11008-1 No score

libvirt-7.7.0-2.1 on GA media

These are all security issues fixed in the libvirt-7.7.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11008-1
Updated: 2026-11-02

OSVSUSE-SU-2019:0948-1 No score

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458).
CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

Other issues addressed:

libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).
conf: added new 'xenbus' controller type
util: skip RDMA detection for non-PCI network devices (bsc#1112182).
qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665).
qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604).
libxl: save current memory value after successful balloon (bsc#1120813).
libxl: Add support for soft reset. (bsc#1081516)

Record: SUSE-SU-2019:0948-1
Updated: 2026-11-02

OSVSUSE-SU-2019:1042-1 No score

Security update for libvirt

This update for libvirt fixes the following issues:

Security issues fixed:

CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458).
CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

Other issue addressed:

cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955)
libxl: save current memory value after successful balloon (bsc#1120813).
libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).
conf: add new 'xenbus' controller type

Record: SUSE-SU-2019:1042-1
Updated: 2026-11-02

OSVSUSE-SU-2019:1285-1 No score

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

Record: SUSE-SU-2019:1285-1
Updated: 2026-11-02

OSVSUSE-SU-2019:14097-1 No score

Security update for libvirt

This update for libvirt fixes the following issues:

Security issues fixed:

CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301).
CVE-2019-3886: Fixed a information exposure which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

Record: SUSE-SU-2019:14097-1
Updated: 2026-11-02

OSVSUSE-SU-2019:1438-1 No score

Security update for libvirt

This update for libvirt fixes the following issues:

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)
CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Other security issues fixed:

CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).
qemu: Add support for using AES secret for SCSI hotplug

Record: SUSE-SU-2019:1438-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libvirt` Debian:12	before 5.0.0-2	5.0.0-2
`libvirt` Debian:13	before 5.0.0-2	5.0.0-2
`libvirt` Debian:14	before 5.0.0-2	5.0.0-2
`libvirt` Mageia:7 From an advisory covering 6 CVEs	before 5.5.0-1.mga7	5.5.0-1.mga7
`python-libvirt` Mageia:7 From an advisory covering 6 CVEs	before 5.5.0-1.mga7	5.5.0-1.mga7
`SLOF` Red Hat:advanced_virtualization:8.1::el8 From an advisory covering 4 CVEs	before 0:20190703-1.gitba1ab360.module+el8.1.0+3730+7d905127	0:20190703-1.gitba1ab360.module+el8.1.0+3730+7d905127
`hivex` Red Hat:advanced_virtualization:8.1::el8 From an advisory covering 4 CVEs	before 0:1.3.15-7.module+el8.1.0+3554+1a3a94a6	0:1.3.15-7.module+el8.1.0+3554+1a3a94a6
`hivex-debuginfo` Red Hat:advanced_virtualization:8.1::el8 From an advisory covering 4 CVEs	before 0:1.3.15-7.module+el8.1.0+3554+1a3a94a6	0:1.3.15-7.module+el8.1.0+3554+1a3a94a6
`hivex-debugsource` Red Hat:advanced_virtualization:8.1::el8 From an advisory covering 4 CVEs	before 0:1.3.15-7.module+el8.1.0+3554+1a3a94a6	0:1.3.15-7.module+el8.1.0+3554+1a3a94a6
`hivex-devel` Red Hat:advanced_virtualization:8.1::el8 From an advisory covering 4 CVEs	before 0:1.3.15-7.module+el8.1.0+3554+1a3a94a6	0:1.3.15-7.module+el8.1.0+3554+1a3a94a6

Show 212 moreShow less

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases, products	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-3886 is a medium vulnerability (CVSS 5.4) in Redhat Libvirt, published April 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.12%, the 66th percentile. Fixed in libvirt 5.0.0-2.