{"id":"CVE-2016-5008","aliases":["DEBIAN-CVE-2016-5008","DLA-541-1","DSA-3613-1","EUVD-2016-5967","GHSA-qmg9-jp26-j65g","MGASA-2016-0248","RHSA-2016:2577","SUSE-SU-2016:1944-1","SUSE-SU-2016:2053-1","SUSE-SU-2018:2141-1","UBUNTU-CVE-2016-5008","USN-3576-1"],"status":"published","title":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is...","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03653,"percentile":0.89684,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-07-01T00:00:00Z","modified":"2026-10-24T10:30:15Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["2.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["2.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["2.0.0-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libvirt","fixed_in":["0.9.12.3-1+deb7u2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libvirt","fixed_in":["1.2.9-9+deb8u3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libvirt","fixed_in":["1.2.9.3-1.4.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libvirt","fixed_in":["1.2.5-15.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libvirt","fixed_in":["1.2.5-15.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"perl-Sys-Virt","fixed_in":["1.2.5-4.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libvirt","fixed_in":["1.2.5-15.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"perl-Sys-Virt","fixed_in":["1.2.5-4.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libvirt","fixed_in":["1.2.18.4-11.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libvirt","fixed_in":["1.2.18.4-11.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libvirt","fixed_in":["1.2.18.4-11.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libvirt","fixed_in":["1.2.18.4-11.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libvirt","fixed_in":["1.2.18.4-11.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","fixed_in":["1.2.2-0ubuntu13.1.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","fixed_in":["1.3.1-1ubuntu10.19"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12.3-1+deb7u2"}]}],"versions":["0.9.12-11","0.9.12-11+deb7u1","0.9.12-11+deb7u3","0.9.12-11+deb7u4","0.9.12.3-1","0.9.12.3-1+deb7u1"]},{"source":"osv","ecosystem":"Debian:8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-9+deb8u3"}]}],"versions":["1.2.9-9","1.2.9-9+deb8u1","1.2.9-9+deb8u2","1.2.9-9+deb8u2~bpo70+1"]},{"source":"osv","ecosystem":"Mageia:5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9.3-1.4.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:storage:3.1:server:el7","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-login-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-lxc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-10.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-15.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-15.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"perl-Sys-Virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-15.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"perl-Sys-Virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18.4-11.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18.4-11.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18.4-11.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18.4-11.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.18.4-11.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-27.13.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.26"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.19"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.26"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.19"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180092","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZZMOMRXNPALA34XDF5NK363KDLAYSTL/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.debian.org/security/2016/dsa-3613","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/91562","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://security.libvirt.org/2016/0001.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00055.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTQF6LXKEEMJG4VOOCIAPJAD6ACBYP4W/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-08/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-07/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2577.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3576-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5008","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DZZMOMRXNPALA34XDF5NK363KDLAYSTL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QTQF6LXKEEMJG4VOOCIAPJAD6ACBYP4W"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZZMOMRXNPALA34XDF5NK363KDLAYSTL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QTQF6LXKEEMJG4VOOCIAPJAD6ACBYP4W"},{"url":"https://usn.ubuntu.com/3576-1"},{"url":"https://github.com/advisories/GHSA-qmg9-jp26-j65g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-5008","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0248.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18873","tags":["report"]},{"url":"https://www.debian.org/security/2016/dsa-3613","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2577","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=921135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=986365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=997561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1002423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1004593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1004602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1026136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1051350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1166452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1195176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1197592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1209802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1215968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1216281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1227880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1233115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1240439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1247987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1249981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1251461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1257486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1260749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1261432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1263574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1270715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1273686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1275039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1276198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1278727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1286679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1289391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1290324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1294617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1297690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1298065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1302373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1308317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1315059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1316465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1318993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1321546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1322210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1323085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1325996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1326660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1327537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1328401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1331228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1332854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1339900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1345743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1350772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1351514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1356937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377212","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2577.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5313","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5313","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5313","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5008","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5008","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/952889","tags":["report"]},{"url":"https://bugzilla.suse.com/970906","tags":["report"]},{"url":"https://bugzilla.suse.com/987527","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5008","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162053-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/854343","tags":["report"]},{"url":"https://bugzilla.suse.com/968483","tags":["report"]},{"url":"https://bugzilla.suse.com/975729","tags":["report"]},{"url":"https://bugzilla.suse.com/989755","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182141-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1076500","tags":["report"]},{"url":"https://bugzilla.suse.com/1079869","tags":["report"]},{"url":"https://bugzilla.suse.com/1083625","tags":["report"]},{"url":"https://bugzilla.suse.com/1092885","tags":["report"]},{"url":"https://bugzilla.suse.com/897352","tags":["report"]},{"url":"https://bugzilla.suse.com/954872","tags":["report"]},{"url":"https://bugzilla.suse.com/956298","tags":["report"]},{"url":"https://bugzilla.suse.com/964465","tags":["report"]},{"url":"https://bugzilla.suse.com/980558","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5748","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-5008","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3576-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-1000256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6764","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-5008","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T15:00:00Z","modified":"2024-08-06T00:46:40.241Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-5967","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T15:00:00Z","modified":"2024-08-06T00:46:40Z","updated_at":"2026-11-03T02:22:43.959327Z"}],"ghsa":[{"id":"GHSA-qmg9-jp26-j65g","title":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is...","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2022-05-14T03:38:01Z","modified":"2025-04-12T13:03:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:01:28.663035Z"}],"nvd":[{"id":"CVE-2016-5008","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T15:59:05.873Z","modified":"2026-06-17T00:48:36.337Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:27.736698Z"}],"osv":[{"id":"CVE-2016-5008","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T15:59:05.873Z","modified":"2026-10-24T10:30:15.449268294Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"DEBIAN-CVE-2016-5008","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T15:59:05.873Z","modified":"2026-09-22T07:02:59.897963691Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"RHSA-2016:2577","title":"Red Hat Security Advisory: libvirt security, bug fix, and enhancement update","status":"published","published":"2024-09-13T11:06:00Z","modified":"2026-06-29T10:14:22Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-5008","description":"libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.","status":"published","published":"2016-07-13T00:00:00Z","modified":"2026-04-22T10:46:08.834799Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"DLA-541-1","title":"libvirt - security update","status":"published","published":"2016-07-01T00:00:00Z","modified":"2026-03-09T02:09:52.857305Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3613-1","title":"libvirt - security update","status":"published","published":"2016-07-02T00:00:00Z","modified":"2026-03-09T01:18:50.011812Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0248","title":"Updated libvirt packages fix security vulnerabilities","description":"Updated libvirt packages fix security vulnerability:\n\nVivian Zhang and Christoph Anton Mitterer discovered that setting an empty VNC\npassword does not work as documented in Libvirt, a virtualisation abstraction\nlibrary. When the password on a VNC server is set to the empty string,\nauthentication on the VNC server will be disabled, allowing any user to connect,\ndespite the documentation declaring that setting an empty password for the VNC\nserver prevents all client connections. With this update the behaviour is\nenforced by setting the password expiration to \"now\" (CVE-2016-5008).\n","status":"published","published":"2016-07-08T19:50:51Z","modified":"2026-04-16T06:23:50.497364211Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:1944-1","title":"Security update for libvirt","description":"\nThis update for libvirt fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2016-5008: empty VNC password disables authentication (bsc#987527)\n\nBugs fixed:\n- bsc#970906: Fixed a race condition in xenstore event handling.\n- bsc#952889: Change hap setting to align with Xen behavior.\n- Fixed 'make check' failures.\n  ","status":"published","published":"2016-08-03T13:01:31Z","modified":"2026-02-04T03:37:06.344829Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2053-1","title":"Security update for libvirt","description":"\nThis update for libvirt fixes one security issue:\n\n- CVE-2016-5008: Empty VNC password disables authentication. (bsc#987527)\n\nAdditionally, the update includes the following non-security fixes:\n\n- Improve waiting for block job readines in virsh. (bsc#989755)\n- Parse negative values in augeas lenses. (bsc#975729)\n- Restart daemons in %posttrans after connection drivers have been processed.\n  (bsc#854343, bsc#968483)\n","status":"published","published":"2016-08-11T17:44:57Z","modified":"2026-02-04T03:20:29.882287Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2018:2141-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885).\n- CVE-2018-1064: Fix denial of service problem during reading from guest agent (bsc#1083625).\n- CVE-2018-5748: Fix resource exhaustion via qemuMonitorIORead() method (bsc#1076500).\n- CVE-2016-5008: Fix that an empty VNC password disables authentication (bsc#987527).\n- CVE-2017-5715: Fix speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869).\n\nBug fixes:\n\n- bsc#980558: Fix NUMA node memory allocation.\n- bsc#968483: Restart daemons in %posttrans after connection drivers.\n- bsc#897352: Systemd fails to ignore LSB services.\n- bsc#956298: virsh domxml-to-native causes segfault of libvirtd.\n- bsc#964465: libvirtd.service causes systemd warning about xencommons service.\n- bsc#954872: Script block-dmmd not working as expected.\n- bsc#854343: libvirt installation run inappropriate systemd restart.\n","status":"published","published":"2018-07-30T16:11:30Z","modified":"2026-02-04T03:45:51.268494Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3576-1","title":"libvirt vulnerabilities","description":"Vivian Zhang and Christoph Anton Mitterer discovered that libvirt\nincorrectly disabled password authentication when the VNC password was set\nto an empty string. A remote attacker could possibly use this issue to\nbypass authentication, contrary to expectations. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-5008)\n\nDaniel P. Berrange discovered that libvirt incorrectly handled validating\nSSL/TLS certificates. A remote attacker could possibly use this issue to\nobtain sensitive information. This issue only affected Ubuntu 17.10.\n(CVE-2017-1000256)\n\nDaniel P. Berrange and Peter Krempa discovered that libvirt incorrectly\nhandled large QEMU replies. An attacker could possibly use this issue to\ncause libvirt to crash, resulting in a denial of service. (CVE-2018-5748)\n\nPedro Sampaio discovered that libvirt incorrectly handled the libnss_dns.so\nmodule. An attacker in a libvirt_lxc session could possibly use this issue\nto execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 17.10. (CVE-2018-6764)\n","status":"published","published":"2018-02-20T19:20:53Z","modified":"2026-04-22T09:44:53.389249Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}