{"id":"CVE-2014-7823","aliases":["DEBIAN-CVE-2014-7823","EUVD-2014-7689","GHSA-v2x4-6r33-27c2","MGASA-2014-0470","RHSA-2014:1873","RHSA-2015:0008","SUSE-SU-2015:0241-1","SUSE-SU-2015:0357-1","UBUNTU-CVE-2014-7823","USN-2404-1","openSUSE-SU-2024:10209-1"],"status":"published","title":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the...","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01905,"percentile":0.79848,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-255"],"published":"2014-11-05T00:00:00Z","modified":"2026-10-23T15:47:29Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["1.2.9-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["1.2.9-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["1.2.9-4"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"libvirt","fixed_in":["1.0.2-8.7.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"libvirt","fixed_in":["1.2.1-1.3.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-python","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-python","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-python","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-python","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","fixed_in":["0:1.1.1-29.el7_0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","fixed_in":["1.2.2-0ubuntu13.1.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-4"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-8.7.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.3.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.2-46.el6_6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-29.el7_0.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.7"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.7"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":32}],"products":[{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"http://secunia.com/advisories/62058","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60895","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-04.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/62303","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2404-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00083.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/60010","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://security.libvirt.org/2014/0007.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7823","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v2x4-6r33-27c2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7823","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0470.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14529","tags":["report"]},{"url":"http://www.ubuntu.com/usn/usn-2404-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1873","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1145667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160817","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1873.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3657","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7823","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0008","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1150379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171124","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0008.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150241-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/891936","tags":["report"]},{"url":"https://bugzilla.suse.com/899334","tags":["report"]},{"url":"https://bugzilla.suse.com/899484","tags":["report"]},{"url":"https://bugzilla.suse.com/900587","tags":["report"]},{"url":"https://bugzilla.suse.com/902976","tags":["report"]},{"url":"https://bugzilla.suse.com/903756","tags":["report"]},{"url":"https://bugzilla.suse.com/904176","tags":["report"]},{"url":"https://bugzilla.suse.com/904426","tags":["report"]},{"url":"https://bugzilla.suse.com/904432","tags":["report"]},{"url":"https://bugzilla.suse.com/909828","tags":["report"]},{"url":"https://bugzilla.suse.com/910862","tags":["report"]},{"url":"https://bugzilla.suse.com/911737","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3657","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8136","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150357-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/843074","tags":["report"]},{"url":"https://bugzilla.suse.com/852397","tags":["report"]},{"url":"https://bugzilla.suse.com/878350","tags":["report"]},{"url":"https://bugzilla.suse.com/879665","tags":["report"]},{"url":"https://bugzilla.suse.com/897654","tags":["report"]},{"url":"https://bugzilla.suse.com/897783","tags":["report"]},{"url":"https://bugzilla.suse.com/899144","tags":["report"]},{"url":"https://bugzilla.suse.com/900084","tags":["report"]},{"url":"https://bugzilla.suse.com/905097","tags":["report"]},{"url":"https://bugzilla.suse.com/907805","tags":["report"]},{"url":"https://bugzilla.suse.com/908381","tags":["report"]},{"url":"https://bugzilla.suse.com/910145","tags":["report"]},{"url":"https://bugzilla.suse.com/911742","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8106","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-7823","tags":["report"]},{"url":"https://www.redhat.com/archives/libvir-list/2014-November/msg00114.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2404-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3657","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5313","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-7823","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-13T15:00:00Z","modified":"2024-08-06T13:03:27.067Z","updated_at":"2026-11-02T14:33:46.955592Z"}],"euvd":[{"id":"EUVD-2014-7689","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-13T15:00:00Z","modified":"2024-08-06T13:03:27Z","updated_at":"2026-11-03T01:56:53.794428Z"}],"ghsa":[{"id":"GHSA-v2x4-6r33-27c2","title":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the...","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2022-05-17T03:11:32Z","modified":"2023-01-27T05:07:12Z","updated_at":"2026-11-02T14:43:04.442683Z"}],"nvd":[{"id":"CVE-2014-7823","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-13T21:32:04.547Z","modified":"2026-06-17T00:15:45.52Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:02:57.304171Z"}],"osv":[{"id":"CVE-2014-7823","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-13T21:32:04Z","modified":"2026-04-16T06:18:34.864457808Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-7823","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-13T21:32:04.547Z","modified":"2026-10-23T15:47:29.24175579Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"MGASA-2014-0470","title":"Updated libvirt packages fix security vulnerability","description":"Eric Blake discovered that libvirt incorrectly handled permissions when\nprocessing the qemuDomainFormatXML command. An attacker with read-only\nprivileges could possibly use this to gain access to certain information\nfrom the domain xml file (CVE-2014-7823).\n","status":"published","published":"2014-11-21T12:44:16Z","modified":"2026-04-16T06:24:36.654350019Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10209-1","title":"libvirt-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the libvirt-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:02.434926Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2014:1873","title":"Red Hat Security Advisory: libvirt security and bug fix update","status":"published","published":"2024-09-15T22:10:15Z","modified":"2026-06-28T10:12:14Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0008","title":"Red Hat Security Advisory: libvirt security and bug fix update","status":"published","published":"2024-09-15T22:10:21Z","modified":"2026-06-28T10:12:42Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-SU-2015:0241-1","title":"Security update for libvirt","description":"libvirt was updated to fix security issues and bugs.\n\nThese security issues were fixed:\n- Fixed denial of service flaw in libvirt's virConnectListAllDomains() function (CVE-2014-3657).\n- Information leak with flag VIR_DOMAIN_XML_MIGRATABLE (CVE-2014-7823).\n- local denial of service in qemu driver (CVE-2014-8136)\n\nThese non-security issues were fixed:\n- Get /proc/sys/net/ipv[46] read-write for wicked to work in containers (bsc#904432).\n- libxl: Several migration improvements (bsc#903756).\n- libxl: allow libxl to find pygrub binary (bdo#770485).\n- Fix Qemu AppArmor abstraction (bsc#904426).\n- AppArmor confined kvm domains couldn't find the apparmor profile template (bnc#902976).\n- Backport commit c110cdb2 to fix non-raw storage format error (bnc#900587).\n- qemu: use systemd's TerminateMachine to kill all processes (bsc#899334).\n- Transformed Errors into warnings in detect_scsi_host_caps.\n- Fix a missing cleanup for lxc containers.\n- Adding network configuration to containers. bsc#904432\n","status":"published","published":"2015-01-08T09:48:42Z","modified":"2025-05-02T04:04:06.588499Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0357-1","title":"Security update for kvm and libvirt","description":"\nThis collective update for KVM and libvirt provides fixes for security and \nnon-security issues.\n\nkvm:\n\n    * Fix NULL pointer dereference because of uninitialized UDP socket.\n      (bsc#897654, CVE-2014-3640)\n    * Fix performance degradation after migration. (bsc#878350)\n    * Fix potential image corruption due to missing FIEMAP_FLAG_SYNC flag\n      in FS_IOC_FIEMAP ioctl. (bsc#908381)\n    * Add validate hex properties for qdev. (bsc#852397)\n    * Add boot option to do strict boot (bsc#900084)\n    * Add query-command-line-options QMP command. (bsc#899144)\n    * Fix incorrect return value of migrate_cancel. (bsc#843074)\n    * Fix insufficient parameter validation during ram load. (bsc#905097,\n      CVE-2014-7840)\n    * Fix insufficient blit region checks in qemu/cirrus. (bsc#907805,\n      CVE-2014-8106)\n\nlibvirt:\n\n    * Fix security hole with migratable flag in dumpxml. (bsc#904176,\n      CVE-2014-7823)\n    * Fix domain deadlock. (bsc#899484, CVE-2014-3657)\n    * Use correct definition when looking up disk in qemu blkiotune.\n      (bsc#897783, CVE-2014-3633)\n    * Fix undefined symbol when starting virtlockd. (bsc#910145)\n    * Add '-boot strict' to qemu's commandline whenever possible.\n      (bsc#900084)\n    * Add support for 'reboot-timeout' in qemu. (bsc#899144)\n    * Increase QEMU's monitor timeout to 30sec. (bsc#911742)\n    * Allow setting QEMU's migration max downtime any time. (bsc#879665)\n\nSecurity Issues:\n\n    * CVE-2014-7823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7823\u003e\n    * CVE-2014-3657\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3657\u003e\n    * CVE-2014-3633\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3633\u003e\n    * CVE-2014-3640\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3640\u003e\n    * CVE-2014-7840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7840\u003e\n    * CVE-2014-8106\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8106\u003e\n\n","status":"published","published":"2015-01-23T01:22:37Z","modified":"2026-02-04T04:33:51.683598Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-7823","description":"The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.","status":"published","published":"2014-11-05T00:00:00Z","modified":"2026-04-22T09:49:57.528137Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2404-1","title":"libvirt vulnerabilities","description":"Pavel Hrdina discovered that libvirt incorrectly handled locking when\nprocessing the virConnectListAllDomains command. An attacker could use this\nissue to cause libvirtd to hang, resulting in a denial of service.\n(CVE-2014-3657)\n\nEric Blake discovered that libvirt incorrectly handled permissions when\nprocessing the qemuDomainFormatXML command. An attacker with read-only\nprivileges could possibly use this to gain access to certain information\nfrom the domain xml file. (CVE-2014-7823)\n","status":"published","published":"2014-11-11T16:32:45Z","modified":"2026-04-22T09:03:57.311145Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}