{"id":"CVE-2019-3886","aliases":["DEBIAN-CVE-2019-3886","EUVD-2019-13496","GHSA-wxvx-hq9w-75x9","MGASA-2019-0390","RHBA-2019:3723","SUSE-SU-2019:0948-1","SUSE-SU-2019:1042-1","SUSE-SU-2019:1285-1","SUSE-SU-2019:14097-1","SUSE-SU-2019:1438-1","openSUSE-SU-2024:11008-1"],"status":"published","title":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01117,"percentile":0.66324,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-862"],"published":"2019-04-04T00:00:00Z","modified":"2026-10-24T10:30:16Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["5.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["5.0.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["5.0.0-2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libvirt","fixed_in":["4.0.0-9.19.4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"libvirt","fixed_in":["4.0.0-9.19.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-2"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1.mga7"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:7","package":"python-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1.mga7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"SLOF","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20190703-1.gitba1ab360.module+el8.1.0+3730+7d905127"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"hivex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"hivex-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-benchmarking","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-benchmarking-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-gfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-gobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-gobject-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-gobject-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-inspect-icons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-java-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-man-pages-ja","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-man-pages-uk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-tools-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-tools-c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-winsupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0-4.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libguestfs-xfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libiscsi-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.0-8.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libtpms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-0.20190121git9dc915572b.module+el8.1.0+3523+b348b848.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libtpms-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-0.20190121git9dc915572b.module+el8.1.0+3523+b348b848.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libtpms-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-0.20190121git9dc915572b.module+el8.1.0+3523+b348b848.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libtpms-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-0.20190121git9dc915572b.module+el8.1.0+3523+b348b848.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-admin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-config-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-config-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-interface-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-network-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-nodedev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-nodedev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-nwfilter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-nwfilter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-qemu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-secret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-secret-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-disk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-disk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-gluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-iscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-iscsi-direct","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-iscsi-direct-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-logical","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-logical-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-mpath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-mpath-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-scsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-driver-storage-scsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-daemon-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-dbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-dbus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-dbus-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-lock-sanlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-lock-sanlock-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-6.module+el8.1.0+4244+9aa4e6bb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4286+bc7b622c"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"libvirt-python-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4286+bc7b622c"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"lua-guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"lua-guestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-bash-completion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-basic-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-basic-filters-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-basic-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-basic-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-curl-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-curl-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-example-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-example-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-gzip-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-gzip-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-linuxdisk-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-linuxdisk-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-ssh-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-ssh-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-vddk-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-vddk-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-xz-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"nbdkit-xz-filter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.5-1.module+el8.1.0+3868+35f94834"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"netcf-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.8-12.module+el8.1.0+3921+a49f7d7b"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-Sys-Guestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-Sys-Guestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-Sys-Virt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4140+e3893fe6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-Sys-Virt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4140+e3893fe6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-Sys-Virt-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4140+e3893fe6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"perl-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4286+bc7b622c"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"python3-libvirt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.6.0-2.module+el8.1.0+4286+bc7b622c"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-guest-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-guest-agent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-img","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-img-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-gluster-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-iscsi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-ssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-block-ssh-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"qemu-kvm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15:4.1.0-13.module+el8.1.0+4313+ef76ec61"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ruby-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ruby-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ruby-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ruby-libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"seabios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-5.module+el8.1.0+4022+29a53beb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"seabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-5.module+el8.1.0+4022+29a53beb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"seavgabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12.0-5.module+el8.1.0+4022+29a53beb"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"sgabios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.20170427git-3.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"sgabios-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.20170427git-3.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"supermin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-10.module+el8.1.0+4076+b5e41ebc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"supermin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-10.module+el8.1.0+4076+b5e41ebc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"supermin-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-10.module+el8.1.0+4076+b5e41ebc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"supermin-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.19-10.module+el8.1.0+4076+b5e41ebc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"swtpm-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.20190425gitca85606.module+el8.1.0+3966+4a23dca1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virglrenderer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-5.20180814git491d3b705.module+el8.1.0+3523+b348b848"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virglrenderer-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-5.20180814git491d3b705.module+el8.1.0+3523+b348b848"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virglrenderer-test-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-5.20180814git491d3b705.module+el8.1.0+3523+b348b848"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virt-dib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virt-dib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virt-p2v-maker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virt-v2v","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"virt-v2v-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ocaml-hivex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ocaml-hivex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ocaml-hivex-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.15-7.module+el8.1.0+3554+1a3a94a6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ocaml-libguestfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:advanced_virtualization:8.1::el8","package":"ocaml-libguestfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.40.2-14.module+el8.1.0+4230+0b6e3259"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.19.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.19.4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-23.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.54.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.54.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.54.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.54.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-27.54.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0-2.1"}]}],"bundled":21}],"affected_more":3,"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"libvirt"},{"vendor":"the libvirt project","product":"libvirt"},{"vendor":"ubuntu","product":"libvirt"}],"references":[{"url":"http://www.securityfocus.com/bid/107777","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.html","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4021-1/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHBA-2019:3723","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3886","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/"},{"url":"https://access.redhat.com/security/cve/CVE-2019-3886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694880","tags":["report"]},{"url":"https://github.com/advisories/GHSA-wxvx-hq9w-75x9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3886","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0390.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24757","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-04/msg00207.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1264","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1579","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-06/msg00023.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1089411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1171007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1292102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1382425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1426162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1487473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1524273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1564270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1578259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1581670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1602418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1634219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1652078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1662260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1662270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1671266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1684466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1687664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1690240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1697676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1699858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1723633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1727866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1736554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1736788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1738626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1740972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1742197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1743477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1745922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1748253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749134","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754466","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3723.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3886","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9755","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9755","tags":["advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4413","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712670","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14378","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14378","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190948-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081516","tags":["report"]},{"url":"https://bugzilla.suse.com/1102604","tags":["report"]},{"url":"https://bugzilla.suse.com/1112182","tags":["report"]},{"url":"https://bugzilla.suse.com/1120813","tags":["report"]},{"url":"https://bugzilla.suse.com/1125665","tags":["report"]},{"url":"https://bugzilla.suse.com/1126325","tags":["report"]},{"url":"https://bugzilla.suse.com/1127458","tags":["report"]},{"url":"https://bugzilla.suse.com/1131595","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3886","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191042-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1131955","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191285-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914097-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1138301","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10161","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191438-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1111331","tags":["report"]},{"url":"https://bugzilla.suse.com/1135273","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11091","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3667","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-3886","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2019-04-04T00:00:00Z","modified":"2024-08-04T19:19:18.727Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13496","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2019-04-04T00:00:00Z","modified":"2024-08-04T19:19:18Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T03:06:54.362786Z"}],"ghsa":[{"id":"GHSA-wxvx-hq9w-75x9","title":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2022-05-13T01:05:21Z","modified":"2023-02-10T05:06:07Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:54:00.716708Z"}],"nvd":[{"id":"CVE-2019-3886","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2019-04-04T16:29:03.43Z","modified":"2026-06-17T02:35:48.507Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"primary"},{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.8,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:05:09.523883Z"}],"osv":[{"id":"CVE-2019-3886","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2019-04-04T16:29:03.43Z","modified":"2026-10-24T10:30:16.860804016Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3886","description":"An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.","status":"published","published":"2019-04-04T16:29:03.43Z","modified":"2026-09-21T07:01:03.983551189Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHBA-2019:3723","title":"Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update","status":"published","published":"2024-09-13T21:58:57Z","modified":"2026-06-28T10:28:02Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"MGASA-2019-0390","title":"Updated libvirt packages fix security vulnerabilities","description":"Updated libvirt packages fix security vulnerabilities:\n\nAn information leak which allowed to retrieve the guest hostname\nunder readonly mode (CVE-2019-3886).\n\nWrong permissions in systemd admin-sock due to missing SocketMode\nparameter (CVE-2019-10132).\n\nArbitrary file read/exec via virDomainSaveImageGetXMLDesc API\n(CVE-2019-10161).\n\nvirDomainManagedSaveDefineXML API exposed to readonly clients\n(CVE-2019-10166).\n\nArbitrary command execution via virConnectGetDomainCapabilities API\n(CVE-2019-10167).\n\nArbitrary command execution via virConnectBaselineHypervisorCPU and\nvirConnectCompareHypervisorCPU APIs (CVE-2019-10168).\n\nAlso, this update contains the libvirt adjustments, that pass through\nthe new 'md-clear' CPU flag, to help address Intel CPU speculative\nexecution flaws.\n","status":"published","published":"2019-12-15T18:03:05Z","modified":"2026-04-16T04:44:47.329125445Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:11008-1","title":"libvirt-7.7.0-2.1 on GA media","description":"These are all security issues fixed in the libvirt-7.7.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:04.623891Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2019:0948-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could\n  have resulted in a remote denial of service via the guest agent (bsc#1127458).\n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n\nOther issues addressed: \n\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: added new 'xenbus' controller type\n- util: skip RDMA detection for non-PCI network devices (bsc#1112182).\n- qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665).\n- qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604).\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- libxl: Add support for soft reset. (bsc#1081516)\n","status":"published","published":"2019-04-15T09:55:42Z","modified":"2026-02-04T02:38:09.060296Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1042-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could \n  have resulted in a remote denial of service via the guest agent (bsc#1127458).  \n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n\nOther issue addressed: \n\n- cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955)\n- libxl: save current memory value after successful balloon (bsc#1120813).\n- libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325).\n- conf: add new 'xenbus' controller type\n","status":"published","published":"2019-04-26T06:41:19Z","modified":"2026-02-04T03:02:00.337762Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1285-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n","status":"published","published":"2019-05-17T13:33:44Z","modified":"2026-02-04T04:33:42.73659Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:14097-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path\n  parameter pointing anywhere on the system and potentially leading to execution\n  of a malicious file with root privileges by libvirtd (bsc#1138301).    \n- CVE-2019-3886: Fixed a information exposure which allowed to retrieve the guest\n  hostname under readonly mode (bsc#1131595).\n","status":"published","published":"2019-06-21T08:18:46Z","modified":"2026-02-04T02:59:37.280618Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1438-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nFour new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)\n\n- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)\n- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)\n- CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)\n- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)\n\nThese updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).\n\nFor more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736\n\nOther security issues fixed:\n\n- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).\n- qemu: Add support for using AES secret for SCSI hotplug\n","status":"published","published":"2019-06-06T15:49:09Z","modified":"2026-02-04T03:16:53.933371Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}