CVE-2023-3750
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.5
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
CVE-2023-3750- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-07
EUVDEUVD-2023-44385
6.5
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
EUVD-2023-44385- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-07
GitHub AdvisoriesGHSA-35p2-9fg3-f2p2
6.5
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked...
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
GHSA-35p2-9fg3-f2p2- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
NVD
6.5
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
CVE-2023-3750- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-07
OSV
6.5
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
CVE-2023-3750- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-3750
5.3
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
DEBIAN-CVE-2023-3750- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVRHSA-2023:6409
6.5
Red Hat Security Advisory: libvirt security, bug fix, and enhancement update
- Record
RHSA-2023:6409- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-3750
5.3
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
- Record
UBUNTU-CVE-2023-3750- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2023:6409 No score
Moderate: libvirt security, bug fix, and enhancement update
The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.
The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)
Security Fix(es):
- libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2023:6409- Updated
- 2026-11-02
OSVCLSA-2025-1739822055 No score
libvirt: Fix of CVE-2023-3750
- CVE-2023-3750: fix race condition in virStoragePoolObjListSearch function to prevent denial of service
- Record
CLSA-2025-1739822055- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13061-1 No score
libvirt-9.5.0-2.1 on GA media
These are all security issues fixed in the libvirt-9.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13061-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3043-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
Security fixes:
- CVE-2023-3750: Fixed mproper locking in virStoragePoolObjListSearch that may lead to denial of service (bsc#1213447).
Other fixes:
- build library with support for modular daemons (bsc#1213352).
- Record
SUSE-SU-2023:3043-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-clientAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-client-qemuAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemonAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-commonAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-config-networkAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-config-nwfilterAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-interfaceAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-networkAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-nodedevAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
Show 138 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libvirt-daemon-driver-nwfilterAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-qemuAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-secretAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storageAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-coreAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-diskAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-iscsiAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-logicalAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-mpathAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-rbdAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-driver-storage-scsiAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-kvmAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-lockAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-logAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-plugin-lockdAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-plugin-sanlockAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-daemon-proxyAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-develAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-docsAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-libsAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirt-nssAlmaLinux:9 |
before 9.5.0-7.el9_3.alma.1 | 9.5.0-7.el9_3.alma.1 |
libvirtTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-clientTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-client-qemuTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemonTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-config-networkTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-config-nwfilterTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-interfaceTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-networkTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-nodedevTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-nwfilterTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-qemuTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-secretTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storageTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-coreTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-diskTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-iscsiTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-logicalTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-mpathTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-rbdTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-driver-storage-scsiTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-daemon-kvmTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-develTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-docsTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-libsTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-lock-sanlockTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-nssTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirt-wiresharkTuxCare:AlmaLinux:9.2 |
before 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 | 9.0.0-10.3.el9_2.alma.1.tuxcare.els2 |
libvirtDebian:12 |
before 9.0.0-4+deb12u1, plus listed versions 9.0.0-4 |
9.0.0-4+deb12u1 |
libvirtDebian:13 |
before 9.6.0-1 | 9.6.0-1 |
libvirtDebian:14 |
before 9.6.0-1 | 9.6.0-1 |
libvirtRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-clientRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-client-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemonRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-commonRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-common-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-config-networkRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-config-nwfilterRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-interfaceRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-interface-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-networkRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-network-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nodedevRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nodedev-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nwfilterRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nwfilter-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-qemuRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-qemu-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-secretRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-secret-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storageRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-coreRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-core-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-diskRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-disk-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-iscsiRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-iscsi-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-logicalRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-logical-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-mpathRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-mpath-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-rbdRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-rbd-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-scsiRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-scsi-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-kvmRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-lockRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-lock-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-logRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-log-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-lockdRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-lockd-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-sanlock-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-proxyRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-proxy-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-libsRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-libs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-nssRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-nss-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-wireshark-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-client-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-client-qemuRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-common-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-interface-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-network-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nodedev-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-nwfilter-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-qemu-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-secret-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-core-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-disk-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-iscsi-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-logical-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-mpath-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-rbd-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-driver-storage-scsi-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-lock-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-log-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-lockd-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-sanlockRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-plugin-sanlock-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-daemon-proxy-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-develRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-docsRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-libs-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-nss-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirt-wireshark-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:9.5.0-7.el9_3 | 0:9.5.0-7.el9_3 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 9.0.0-150500.6.11.1 | 9.0.0-150500.6.11.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 9.0.0-150500.6.11.1 | 9.0.0-150500.6.11.1 |
libvirtopenSUSE:Leap 15.5 |
before 9.0.0-150500.6.11.1 | 9.0.0-150500.6.11.1 |
libvirtopenSUSE:Tumbleweed |
before 9.5.0-2.1 | 9.5.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | EUVD | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-3750 is a medium vulnerability (CVSS 6.5) in Redhat Libvirt, published July 19, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.76%, the 55th percentile. Fixed in libvirt 9.5.0-7.el9_3.alma.1.
References
access.redhat.com/errata/RHSA-2023:6409
access.redhat.com/security/cve/CVE-2023-3750
bugzilla.redhat.com/show_bug.cgi?id=2222210
lists.fedoraproject.org/archives/list/[email protected]/message/EVK6JKP36CHE7YAFDJNPNLTW4OWJJ7TQ
nvd.nist.gov/vuln/detail/CVE-2023-3750
github.com/advisories/GHSA-35p2-9fg3-f2p2
Show 73 moreShow less
bugzilla.redhat.com/2222210
errata.almalinux.org/9/ALSA-2023-6409.html
errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1739822055.html
access.redhat.com/downloads/content/package-browser
github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3750.json
security-tracker.debian.org/tracker/CVE-2023-3750
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1961326
bugzilla.redhat.com/show_bug.cgi?id=2000410
bugzilla.redhat.com/show_bug.cgi?id=2004850
bugzilla.redhat.com/show_bug.cgi?id=2014030
bugzilla.redhat.com/show_bug.cgi?id=2032406
bugzilla.redhat.com/show_bug.cgi?id=2035985
bugzilla.redhat.com/show_bug.cgi?id=2037734
bugzilla.redhat.com/show_bug.cgi?id=2078693
bugzilla.redhat.com/show_bug.cgi?id=2119007
bugzilla.redhat.com/show_bug.cgi?id=2137346
bugzilla.redhat.com/show_bug.cgi?id=2138150
bugzilla.redhat.com/show_bug.cgi?id=2143158
bugzilla.redhat.com/show_bug.cgi?id=2151064
bugzilla.redhat.com/show_bug.cgi?id=2154750
bugzilla.redhat.com/show_bug.cgi?id=2156300
bugzilla.redhat.com/show_bug.cgi?id=2160356
bugzilla.redhat.com/show_bug.cgi?id=2160435
bugzilla.redhat.com/show_bug.cgi?id=2161965
bugzilla.redhat.com/show_bug.cgi?id=2166235
bugzilla.redhat.com/show_bug.cgi?id=2171384
bugzilla.redhat.com/show_bug.cgi?id=2171860
bugzilla.redhat.com/show_bug.cgi?id=2171973
bugzilla.redhat.com/show_bug.cgi?id=2173142
bugzilla.redhat.com/show_bug.cgi?id=2174397
bugzilla.redhat.com/show_bug.cgi?id=2174700
bugzilla.redhat.com/show_bug.cgi?id=2175449
bugzilla.redhat.com/show_bug.cgi?id=2175582
bugzilla.redhat.com/show_bug.cgi?id=2175785
bugzilla.redhat.com/show_bug.cgi?id=2176215
bugzilla.redhat.com/show_bug.cgi?id=2176917
bugzilla.redhat.com/show_bug.cgi?id=2176921
bugzilla.redhat.com/show_bug.cgi?id=2176923
bugzilla.redhat.com/show_bug.cgi?id=2176924
bugzilla.redhat.com/show_bug.cgi?id=2178866
bugzilla.redhat.com/show_bug.cgi?id=2178885
bugzilla.redhat.com/show_bug.cgi?id=2179030
bugzilla.redhat.com/show_bug.cgi?id=2180679
bugzilla.redhat.com/show_bug.cgi?id=2181234
bugzilla.redhat.com/show_bug.cgi?id=2181235
bugzilla.redhat.com/show_bug.cgi?id=2182961
bugzilla.redhat.com/show_bug.cgi?id=2184966
bugzilla.redhat.com/show_bug.cgi?id=2185184
bugzilla.redhat.com/show_bug.cgi?id=2187133
bugzilla.redhat.com/show_bug.cgi?id=2187278
bugzilla.redhat.com/show_bug.cgi?id=2193315
bugzilla.redhat.com/show_bug.cgi?id=2196178
bugzilla.redhat.com/show_bug.cgi?id=2203709
bugzilla.redhat.com/show_bug.cgi?id=2208946
bugzilla.redhat.com/show_bug.cgi?id=2209191
bugzilla.redhat.com/show_bug.cgi?id=2209853
bugzilla.redhat.com/show_bug.cgi?id=2210058
bugzilla.redhat.com/show_bug.cgi?id=2210287
bugzilla.redhat.com/show_bug.cgi?id=2216212
bugzilla.redhat.com/show_bug.cgi?id=2224016
bugzilla.redhat.com/show_bug.cgi?id=2236057
bugzilla.redhat.com/show_bug.cgi?id=2236500
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6409.json
cve.org/CVERecord?id=CVE-2023-3750
suse.com/support/update/announcement/2023/suse-su-20233043-1
bugzilla.suse.com/1213352
bugzilla.suse.com/1213447
suse.com/security/cve/CVE-2023-3750
ubuntu.com/security/CVE-2023-3750
listman.redhat.com/archives/libvir-list/2023-July/240776.html
ubuntu.com/security/notices/USN-6253-1