CVE-2021-4147
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
CVE-2021-4147- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-667
- Updated
- 2026-11-02
CVE List No score
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
CVE-2021-4147- Weakness
- CWE-667
- Updated
- 2026-11-02
EUVDEUVD-2021-34015 No score
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
EUVD-2021-34015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hh52-g3xv-6xxc
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
GHSA-hh52-g3xv-6xxc- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-667
- Updated
- 2026-11-02
OSV
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
CVE-2021-4147- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-4147
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
DEBIAN-CVE-2021-4147- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
Show 13 moreShow less
OSVUBUNTU-CVE-2021-4147
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
- Record
UBUNTU-CVE-2021-4147- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0021-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- Record
openSUSE-SU-2022:0021-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11758-1 No score
libvirt-8.0.0-1.1 on GA media
These are all security issues fixed in the libvirt-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11758-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0021-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- Record
SUSE-SU-2022:0021-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0031-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0031-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0032-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0032-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0041-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0041-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0042-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0042-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0045-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0045-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0045-2 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0045-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:0128-1 No score
Security update for libvirt
This update for libvirt fixes the following issues:
- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
- Record
SUSE-SU-2022:0128-1- Updated
- 2026-11-02
OSVUSN-5399-1 No score
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled certain locking operations. A local attacker could possibly use this issue to cause libvirt to stop accepting connections, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-3667)
It was discovered that libvirt incorrectly handled threads during shutdown. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3975)
It was discovered that libvirt incorrectly handled the libxl driver. An attacker inside a guest could possibly use this issue to cause libvirtd to crash or stop responding, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2021-4147)
It was discovered that libvirt incorrectly handled the nwfilter driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. (CVE-2022-0897)
It was discovered that libvirt incorrectly handled the polkit access control driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-25637)
It was discovered that libvirt incorrectly generated SELinux labels. In environments using SELinux, this issue could allow the sVirt confinement to be bypassed. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3631)
- Record
USN-5399-1- Updated
- 2026-11-02
OSVUSN-8652-1 No score
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled guest reboots in the libxl driver. An attacker in a guest could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)
Alexander Kuznetsov discovered that libvirt incorrectly handled listing network interfaces. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-1441)
It was discovered that libvirt incorrectly handled certain values in its RPC library. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-2494)
It was discovered that libvirt incorrectly handled listing network interfaces under certain circumstances. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-2496)
It was discovered that libvirt incorrectly set permissions on external inactive snapshots, making them world-readable. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-13193)
It was discovered that libvirt incorrectly handled certain characters in virtual network definitions. An authenticated user could possibly use this issue to inject arbitrary configuration directives and execute arbitrary code as root. This issue did not affect Ubuntu 14.04 LTS. (CVE-2026-61477)
It was discovered that libvirt incorrectly handled certain XML input. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. (CVE-2026-61478)
He Wei discovered that libvirt incorrectly followed symbolic links when changing file ownership. A local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)
It was discovered that libvirt incorrectly set permissions on images during storage volume clone and convert operations, making them temporarily world-readable. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-63623)
- Record
USN-8652-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtDebian:12 |
before 7.10.0-2 | 7.10.0-2 |
libvirtDebian:13 |
before 7.10.0-2 | 7.10.0-2 |
libvirtDebian:14 |
before 7.10.0-2 | 7.10.0-2 |
libvirtDebian:10 From an advisory covering 11 CVEs |
before 5.0.0-4+deb10u2, plus listed versions 5.0.0-45.0.0-4+deb10u1 |
5.0.0-4+deb10u2 |
libvirtSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 7.1.0-6.11.1 | 7.1.0-6.11.1 |
libvirtSUSE:Linux Enterprise Module for Server Applications 15 SP3 |
before 7.1.0-6.11.1 | 7.1.0-6.11.1 |
libvirtSUSE:Linux Enterprise Micro 5.1 |
before 7.1.0-6.11.1 | 7.1.0-6.11.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 4.0.0-9.40.1 | 4.0.0-9.40.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 4.0.0-9.40.1 | 4.0.0-9.40.1 |
libvirtSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 4.0.0-9.40.1 | 4.0.0-9.40.1 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 4.0.0-9.40.1 | 4.0.0-9.40.1 |
libvirtSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 5.1.0-13.28.2 | 5.1.0-13.28.2 |
libvirtSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 5.1.0-13.28.2 | 5.1.0-13.28.2 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 5.1.0-13.28.2 | 5.1.0-13.28.2 |
libvirtSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 3.3.0-5.49.1 | 3.3.0-5.49.1 |
libvirtSUSE:OpenStack Cloud 9 From an advisory covering 2 CVEs |
before 4.0.0-8.26.1 | 4.0.0-8.26.1 |
libvirtSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 2 CVEs |
before 4.0.0-8.26.1 | 4.0.0-8.26.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 4.0.0-8.26.1 | 4.0.0-8.26.1 |
libvirtSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 2 CVEs |
before 4.0.0-8.26.1 | 4.0.0-8.26.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise Micro 5.0 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 6.0.0-13.24.1 | 6.0.0-13.24.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtSUSE:Enterprise Storage 6 From an advisory covering 2 CVEs |
before 5.1.0-17.1 | 5.1.0-17.1 |
libvirtUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.1.1-0ubuntu81.1.1-0ubuntu91.1.4-0ubuntu21.1.4-0ubuntu31.1.4-0ubuntu4 Show 45 moreShow less1.1.4-0ubuntu51.2.0-0ubuntu11.2.0-0ubuntu21.2.0-0ubuntu31.2.1-0ubuntu11.2.1-0ubuntu21.2.1-0ubuntu31.2.1-0ubuntu41.2.1-0ubuntu51.2.1-0ubuntu71.2.1-0ubuntu81.2.1-0ubuntu91.2.1-0ubuntu101.2.2-0ubuntu11.2.2-0ubuntu21.2.2-0ubuntu31.2.2-0ubuntu41.2.2-0ubuntu51.2.2-0ubuntu61.2.2-0ubuntu71.2.2-0ubuntu81.2.2-0ubuntu91.2.2-0ubuntu101.2.2-0ubuntu111.2.2-0ubuntu121.2.2-0ubuntu131.2.2-0ubuntu13.11.2.2-0ubuntu13.1.11.2.2-0ubuntu13.1.21.2.2-0ubuntu13.1.41.2.2-0ubuntu13.1.51.2.2-0ubuntu13.1.61.2.2-0ubuntu13.1.71.2.2-0ubuntu13.1.81.2.2-0ubuntu13.1.91.2.2-0ubuntu13.1.101.2.2-0ubuntu13.1.121.2.2-0ubuntu13.1.141.2.2-0ubuntu13.1.161.2.2-0ubuntu13.1.171.2.2-0ubuntu13.1.201.2.2-0ubuntu13.1.211.2.2-0ubuntu13.1.221.2.2-0ubuntu13.1.231.2.2-0ubuntu13.1.25 |
None known |
libvirtUbuntu:Pro:16.04:LTS |
before 1.3.1-1ubuntu10.31+esm1, plus listed versions 1.2.16-2ubuntu111.2.16-2ubuntu121.2.16-2ubuntu131.2.16-2ubuntu141.2.21-2ubuntu1 Show 40 moreShow less1.2.21-2ubuntu31.2.21-2ubuntu41.2.21-2ubuntu51.2.21-2ubuntu71.2.21-2ubuntu81.2.21-2ubuntu91.2.21-2ubuntu101.3.1-1ubuntu11.3.1-1ubuntu21.3.1-1ubuntu31.3.1-1ubuntu41.3.1-1ubuntu61.3.1-1ubuntu91.3.1-1ubuntu101.3.1-1ubuntu10.11.3.1-1ubuntu10.21.3.1-1ubuntu10.31.3.1-1ubuntu10.51.3.1-1ubuntu10.61.3.1-1ubuntu10.71.3.1-1ubuntu10.81.3.1-1ubuntu10.101.3.1-1ubuntu10.111.3.1-1ubuntu10.121.3.1-1ubuntu10.131.3.1-1ubuntu10.141.3.1-1ubuntu10.151.3.1-1ubuntu10.171.3.1-1ubuntu10.181.3.1-1ubuntu10.191.3.1-1ubuntu10.211.3.1-1ubuntu10.221.3.1-1ubuntu10.231.3.1-1ubuntu10.241.3.1-1ubuntu10.251.3.1-1ubuntu10.261.3.1-1ubuntu10.271.3.1-1ubuntu10.291.3.1-1ubuntu10.301.3.1-1ubuntu10.31 |
1.3.1-1ubuntu10.31+esm1 |
libvirtUbuntu:18.04:LTS |
before 4.0.0-1ubuntu8.21, plus listed versions 3.6.0-1ubuntu53.6.0-1ubuntu64.0.0-1ubuntu14.0.0-1ubuntu24.0.0-1ubuntu3 Show 24 moreShow less4.0.0-1ubuntu44.0.0-1ubuntu54.0.0-1ubuntu64.0.0-1ubuntu74.0.0-1ubuntu84.0.0-1ubuntu8.14.0.0-1ubuntu8.24.0.0-1ubuntu8.34.0.0-1ubuntu8.44.0.0-1ubuntu8.54.0.0-1ubuntu8.64.0.0-1ubuntu8.74.0.0-1ubuntu8.84.0.0-1ubuntu8.94.0.0-1ubuntu8.104.0.0-1ubuntu8.114.0.0-1ubuntu8.124.0.0-1ubuntu8.134.0.0-1ubuntu8.144.0.0-1ubuntu8.154.0.0-1ubuntu8.164.0.0-1ubuntu8.174.0.0-1ubuntu8.194.0.0-1ubuntu8.20 |
4.0.0-1ubuntu8.21 |
libvirtUbuntu:20.04:LTS |
before 6.0.0-0ubuntu8.16, plus listed versions 5.4.0-0ubuntu56.0.0-0ubuntu16.0.0-0ubuntu26.0.0-0ubuntu36.0.0-0ubuntu4 Show 18 moreShow less6.0.0-0ubuntu56.0.0-0ubuntu66.0.0-0ubuntu76.0.0-0ubuntu86.0.0-0ubuntu8.16.0.0-0ubuntu8.26.0.0-0ubuntu8.36.0.0-0ubuntu8.46.0.0-0ubuntu8.56.0.0-0ubuntu8.76.0.0-0ubuntu8.86.0.0-0ubuntu8.96.0.0-0ubuntu8.106.0.0-0ubuntu8.116.0.0-0ubuntu8.126.0.0-0ubuntu8.136.0.0-0ubuntu8.146.0.0-0ubuntu8.15 |
6.0.0-0ubuntu8.16 |
libvirtUbuntu:18.04:LTS From an advisory covering 6 CVEs |
before 4.0.0-1ubuntu8.21, plus listed versions 3.6.0-1ubuntu53.6.0-1ubuntu64.0.0-1ubuntu14.0.0-1ubuntu24.0.0-1ubuntu3 Show 24 moreShow less4.0.0-1ubuntu44.0.0-1ubuntu54.0.0-1ubuntu64.0.0-1ubuntu74.0.0-1ubuntu84.0.0-1ubuntu8.14.0.0-1ubuntu8.24.0.0-1ubuntu8.34.0.0-1ubuntu8.44.0.0-1ubuntu8.54.0.0-1ubuntu8.64.0.0-1ubuntu8.74.0.0-1ubuntu8.84.0.0-1ubuntu8.94.0.0-1ubuntu8.104.0.0-1ubuntu8.114.0.0-1ubuntu8.124.0.0-1ubuntu8.134.0.0-1ubuntu8.144.0.0-1ubuntu8.154.0.0-1ubuntu8.164.0.0-1ubuntu8.174.0.0-1ubuntu8.194.0.0-1ubuntu8.20 |
4.0.0-1ubuntu8.21 |
libvirtUbuntu:20.04:LTS From an advisory covering 6 CVEs |
before 6.0.0-0ubuntu8.16, plus listed versions 5.4.0-0ubuntu56.0.0-0ubuntu16.0.0-0ubuntu26.0.0-0ubuntu36.0.0-0ubuntu4 Show 18 moreShow less6.0.0-0ubuntu56.0.0-0ubuntu66.0.0-0ubuntu76.0.0-0ubuntu86.0.0-0ubuntu8.16.0.0-0ubuntu8.26.0.0-0ubuntu8.36.0.0-0ubuntu8.46.0.0-0ubuntu8.56.0.0-0ubuntu8.76.0.0-0ubuntu8.86.0.0-0ubuntu8.96.0.0-0ubuntu8.106.0.0-0ubuntu8.116.0.0-0ubuntu8.126.0.0-0ubuntu8.136.0.0-0ubuntu8.146.0.0-0ubuntu8.15 |
6.0.0-0ubuntu8.16 |
libvirtUbuntu:Pro:14.04:LTS From an advisory covering 9 CVEs |
before 1.2.2-0ubuntu13.1.28+esm2, plus listed versions 1.1.1-0ubuntu81.1.1-0ubuntu91.1.4-0ubuntu21.1.4-0ubuntu31.1.4-0ubuntu4 Show 45 moreShow less1.1.4-0ubuntu51.2.0-0ubuntu11.2.0-0ubuntu21.2.0-0ubuntu31.2.1-0ubuntu11.2.1-0ubuntu21.2.1-0ubuntu31.2.1-0ubuntu41.2.1-0ubuntu51.2.1-0ubuntu71.2.1-0ubuntu81.2.1-0ubuntu91.2.1-0ubuntu101.2.2-0ubuntu11.2.2-0ubuntu21.2.2-0ubuntu31.2.2-0ubuntu41.2.2-0ubuntu51.2.2-0ubuntu61.2.2-0ubuntu71.2.2-0ubuntu81.2.2-0ubuntu91.2.2-0ubuntu101.2.2-0ubuntu111.2.2-0ubuntu121.2.2-0ubuntu131.2.2-0ubuntu13.11.2.2-0ubuntu13.1.11.2.2-0ubuntu13.1.21.2.2-0ubuntu13.1.41.2.2-0ubuntu13.1.51.2.2-0ubuntu13.1.61.2.2-0ubuntu13.1.71.2.2-0ubuntu13.1.81.2.2-0ubuntu13.1.91.2.2-0ubuntu13.1.101.2.2-0ubuntu13.1.121.2.2-0ubuntu13.1.141.2.2-0ubuntu13.1.161.2.2-0ubuntu13.1.171.2.2-0ubuntu13.1.201.2.2-0ubuntu13.1.211.2.2-0ubuntu13.1.221.2.2-0ubuntu13.1.231.2.2-0ubuntu13.1.25 |
1.2.2-0ubuntu13.1.28+esm2 |
libvirtUbuntu:Pro:16.04:LTS From an advisory covering 9 CVEs |
before 1.3.1-1ubuntu10.31+esm1, plus listed versions 1.2.16-2ubuntu111.2.16-2ubuntu121.2.16-2ubuntu131.2.16-2ubuntu141.2.21-2ubuntu1 Show 40 moreShow less1.2.21-2ubuntu31.2.21-2ubuntu41.2.21-2ubuntu51.2.21-2ubuntu71.2.21-2ubuntu81.2.21-2ubuntu91.2.21-2ubuntu101.3.1-1ubuntu11.3.1-1ubuntu21.3.1-1ubuntu31.3.1-1ubuntu41.3.1-1ubuntu61.3.1-1ubuntu91.3.1-1ubuntu101.3.1-1ubuntu10.11.3.1-1ubuntu10.21.3.1-1ubuntu10.31.3.1-1ubuntu10.51.3.1-1ubuntu10.61.3.1-1ubuntu10.71.3.1-1ubuntu10.81.3.1-1ubuntu10.101.3.1-1ubuntu10.111.3.1-1ubuntu10.121.3.1-1ubuntu10.131.3.1-1ubuntu10.141.3.1-1ubuntu10.151.3.1-1ubuntu10.171.3.1-1ubuntu10.181.3.1-1ubuntu10.191.3.1-1ubuntu10.211.3.1-1ubuntu10.221.3.1-1ubuntu10.231.3.1-1ubuntu10.241.3.1-1ubuntu10.251.3.1-1ubuntu10.261.3.1-1ubuntu10.271.3.1-1ubuntu10.291.3.1-1ubuntu10.301.3.1-1ubuntu10.31 |
1.3.1-1ubuntu10.31+esm1 |
libvirtUbuntu:Pro:18.04:LTS From an advisory covering 9 CVEs |
before 4.0.0-1ubuntu8.21+esm1, plus listed versions 3.6.0-1ubuntu53.6.0-1ubuntu64.0.0-1ubuntu14.0.0-1ubuntu24.0.0-1ubuntu3 Show 25 moreShow less4.0.0-1ubuntu44.0.0-1ubuntu54.0.0-1ubuntu64.0.0-1ubuntu74.0.0-1ubuntu84.0.0-1ubuntu8.14.0.0-1ubuntu8.24.0.0-1ubuntu8.34.0.0-1ubuntu8.44.0.0-1ubuntu8.54.0.0-1ubuntu8.64.0.0-1ubuntu8.74.0.0-1ubuntu8.84.0.0-1ubuntu8.94.0.0-1ubuntu8.104.0.0-1ubuntu8.114.0.0-1ubuntu8.124.0.0-1ubuntu8.134.0.0-1ubuntu8.144.0.0-1ubuntu8.154.0.0-1ubuntu8.164.0.0-1ubuntu8.174.0.0-1ubuntu8.194.0.0-1ubuntu8.204.0.0-1ubuntu8.21 |
4.0.0-1ubuntu8.21+esm1 |
libvirtUbuntu:Pro:20.04:LTS From an advisory covering 9 CVEs |
before 6.0.0-0ubuntu8.20+esm1, plus listed versions 5.4.0-0ubuntu56.0.0-0ubuntu16.0.0-0ubuntu26.0.0-0ubuntu36.0.0-0ubuntu4 Show 21 moreShow less6.0.0-0ubuntu56.0.0-0ubuntu66.0.0-0ubuntu76.0.0-0ubuntu86.0.0-0ubuntu8.16.0.0-0ubuntu8.26.0.0-0ubuntu8.36.0.0-0ubuntu8.46.0.0-0ubuntu8.56.0.0-0ubuntu8.76.0.0-0ubuntu8.86.0.0-0ubuntu8.96.0.0-0ubuntu8.106.0.0-0ubuntu8.116.0.0-0ubuntu8.126.0.0-0ubuntu8.136.0.0-0ubuntu8.146.0.0-0ubuntu8.156.0.0-0ubuntu8.166.0.0-0ubuntu8.196.0.0-0ubuntu8.20 |
6.0.0-0ubuntu8.20+esm1 |
libvirtUbuntu:22.04:LTS From an advisory covering 9 CVEs |
before 8.0.0-1ubuntu7.19, plus listed versions 7.6.0-0ubuntu17.6.0-0ubuntu38.0.0-1ubuntu38.0.0-1ubuntu48.0.0-1ubuntu5 Show 20 moreShow less8.0.0-1ubuntu68.0.0-1ubuntu78.0.0-1ubuntu7.18.0.0-1ubuntu7.28.0.0-1ubuntu7.38.0.0-1ubuntu7.48.0.0-1ubuntu7.58.0.0-1ubuntu7.68.0.0-1ubuntu7.78.0.0-1ubuntu7.88.0.0-1ubuntu7.98.0.0-1ubuntu7.108.0.0-1ubuntu7.118.0.0-1ubuntu7.128.0.0-1ubuntu7.138.0.0-1ubuntu7.148.0.0-1ubuntu7.158.0.0-1ubuntu7.168.0.0-1ubuntu7.178.0.0-1ubuntu7.18 |
8.0.0-1ubuntu7.19 |
libvirtUbuntu:24.04:LTS From an advisory covering 9 CVEs |
before 10.0.0-2ubuntu8.16, plus listed versions 9.6.0-1ubuntu19.6.0-1ubuntu210.0.0-1ubuntu110.0.0-2ubuntu110.0.0-2ubuntu5 Show 17 moreShow less10.0.0-2ubuntu710.0.0-2ubuntu810.0.0-2ubuntu8.110.0.0-2ubuntu8.210.0.0-2ubuntu8.310.0.0-2ubuntu8.410.0.0-2ubuntu8.510.0.0-2ubuntu8.610.0.0-2ubuntu8.710.0.0-2ubuntu8.810.0.0-2ubuntu8.910.0.0-2ubuntu8.1010.0.0-2ubuntu8.1110.0.0-2ubuntu8.1210.0.0-2ubuntu8.1310.0.0-2ubuntu8.1410.0.0-2ubuntu8.15 |
10.0.0-2ubuntu8.16 |
libvirtUbuntu:26.04:LTS From an advisory covering 9 CVEs |
before 12.0.0-1ubuntu5.3, plus listed versions 11.6.0-1ubuntu311.6.0-1ubuntu511.6.0-1ubuntu611.6.0-1ubuntu711.6.0-1ubuntu8 Show 4 moreShow less12.0.0-1ubuntu312.0.0-1ubuntu512.0.0-1ubuntu5.112.0.0-1ubuntu5.2 |
12.0.0-1ubuntu5.3 |
libvirtopenSUSE:Leap 15.3 |
before 7.1.0-6.11.1 | 7.1.0-6.11.1 |
libvirtopenSUSE:Tumbleweed |
before 8.0.0-1.1 | 8.0.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-4147 is a medium vulnerability (CVSS 6.5) in Redhat Libvirt, published January 4, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in libvirt 7.10.0-2.
References
bugzilla.redhat.com/show_bug.cgi?id=2034195
security.netapp.com/advisory/ntap-20220513-0004
lists.debian.org/debian-lts-announce/2024/04/msg00000.html
nvd.nist.gov/vuln/detail/CVE-2021-4147
github.com/advisories/GHSA-hh52-g3xv-6xxc
security-tracker.debian.org/tracker/CVE-2021-4147
Show 38 moreShow less
suse.com/support/update/announcement/2022/suse-su-20220021-1
bugzilla.suse.com/1191668
ubuntu.com/security/CVE-2021-4147
listman.redhat.com/archives/libvir-list/2021-November/msg00908.html
cve.org/CVERecord?id=CVE-2021-4147
lists.opensuse.org/archives/list/[email protected]/thread/4GRZCYHIJFWN3FE3P7JJYRY7F7UO2HTA
Left out here: 9 versions. The JSON record has them.