{"id":"CVE-2020-12430","aliases":["ALPINE-CVE-2020-12430","DEBIAN-CVE-2020-12430","DLA-3778-1","EUVD-2020-4742","GHSA-mm94-82mx-j73h","MGASA-2020-0250","SUSE-SU-2020:1208-1","SUSE-SU-2020:1277-1","UBUNTU-CVE-2020-12430","USN-4371-1","openSUSE-SU-2024:14490-1"],"status":"published","title":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0...","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02275,"percentile":0.83218,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2020-04-28T00:00:00Z","modified":"2026-10-26T12:00:29Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libvirt","fixed_in":["5.5.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libvirt","fixed_in":["5.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libvirt","fixed_in":["5.5.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libvirt","fixed_in":["5.5.0-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["6.4.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["6.4.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["6.4.0-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libvirt","fixed_in":["6.0.0-0ubuntu6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"5.5.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"5.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"5.5.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"5.5.0-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-4+deb10u2"}]}],"versions":["5.0.0-4","5.0.0-4+deb10u1"],"bundled":11},{"source":"osv","ecosystem":"Mageia:7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.0-1.1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-8.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-8.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu6"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.17"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.9.0-3.1"}]}],"bundled":2}],"products":[{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"libvirt"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804548","tags":["x_transferred","Issue Tracking","Permissions Required","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828190","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=9bf9e0ae6af38c806f4672ca7b12a6b38d5a9581","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200518-0003/","tags":["x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/4371-1/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-12430"},{"url":"https://libvirt.org/git/?p=libvirt.git;a=commit;h=9bf9e0ae6af38c806f4672ca7b12a6b38d5a9581"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5GE6ISYUL3CIWO3FQRUGMKTKP2NYED2"},{"url":"https://security.netapp.com/advisory/ntap-20200518-0003"},{"url":"https://usn.ubuntu.com/4371-1"},{"url":"https://github.com/advisories/GHSA-mm94-82mx-j73h"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-12430","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-12430","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0250.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26600","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201208-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1145774","tags":["report"]},{"url":"https://bugzilla.suse.com/1151850","tags":["report"]},{"url":"https://bugzilla.suse.com/1152649","tags":["report"]},{"url":"https://bugzilla.suse.com/1154093","tags":["report"]},{"url":"https://bugzilla.suse.com/1157490","tags":["report"]},{"url":"https://bugzilla.suse.com/1161883","tags":["report"]},{"url":"https://bugzilla.suse.com/1162160","tags":["report"]},{"url":"https://bugzilla.suse.com/1167007","tags":["report"]},{"url":"https://bugzilla.suse.com/1168683","tags":["report"]},{"url":"https://bugzilla.suse.com/1170765","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12430","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201277-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12430","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4371-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-12430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10703","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UEZKWHJBBGGKIPJ6SR2VA5UMFQO2PBNJ/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2700","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T00:00:00Z","modified":"2024-08-04T11:56:52.057Z","updated_at":"2026-11-02T14:35:52.925152Z"}],"euvd":[{"id":"EUVD-2020-4742","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T00:00:00Z","modified":"2024-08-04T11:56:52Z","updated_at":"2026-11-03T03:07:39.896975Z"}],"ghsa":[{"id":"GHSA-mm94-82mx-j73h","title":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0...","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2022-05-24T17:16:46Z","modified":"2024-04-01T15:30:28Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:55:45.740984Z"}],"nvd":[{"id":"CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T20:15:12.717Z","modified":"2026-06-17T02:51:49.233Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"ALPINE-CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T20:15:12.717Z","modified":"2026-10-26T11:17:55.104406628Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T20:15:12.717Z","modified":"2026-10-24T10:30:44.577228579Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T20:15:12.717Z","modified":"2026-10-26T12:00:29.42745512Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-12430","description":"An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.","status":"published","published":"2020-04-28T20:15:00Z","modified":"2026-04-22T12:28:12.664517Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"DLA-3778-1","title":"libvirt - security update","status":"published","published":"2024-04-01T00:00:00Z","modified":"2026-03-09T01:19:38.588428Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2020-0250","title":"Updated libvirt packages fix security vulnerability","description":"Updated libvirt packages fix security vulnerability:\n\nIt was discovered that libvirt incorrectly handled an active pool without\na target path. A remote attacker could possibly use this issue to cause\nlibvirt to crash, resulting in a denial of service (CVE-2020-10703).\n\nIt was discovered that libvirt incorrectly handled memory when retrieving\ncertain domain statistics. A remote attacker could possibly use this issue to\ncause libvirt to consume resources, resulting in a denial of service\n(CVE-2020-12430).\n","status":"published","published":"2020-06-10T22:26:12Z","modified":"2026-04-16T04:42:07.389885153Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2024:14490-1","title":"libvirt-10.9.0-3.1 on GA media","description":"These are all security issues fixed in the libvirt-10.9.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-02-04T03:00:29.76611Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2020:1208-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683).\n- CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765).\n\nNon-security issues fixed:\n\n- Support setting credit2 scheduler parameters for xen (bsc#1162160).\n- Add SLE 15 and SLE 12 service packs support to 'libvirtd' (bsc#1154093).\n- Add support boot from 'vfio-ccw'and 'mdev' devices (jsc#SLE-5826, FATE#327355, bsc#1152649).\n- Fix lock manager lock ordering (bsc#1145774).\n- Do not define known no-op features. (bsc#1151850).\n- Enable use of newer libxl APIs for retrieving memory statistics (bsc#1157490, bsc#1167007).\n- Create multipath targets for qemu PR (bsc#1161883).\n","status":"published","published":"2020-05-06T16:46:41Z","modified":"2026-02-04T04:34:36.66777Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1277-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683).\n- CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765).\n\nNon-security issues fixed:\n\n- Support setting credit2 scheduler parameters for xen (bsc#1162160).\n- Enable use of newer libxl APIs for retrieving memory statistics (bsc#1157490, bsc#1167007).\n- Create multipath targets for qemu PR (bsc#1161883).\n","status":"published","published":"2020-05-14T12:00:00Z","modified":"2026-02-04T03:46:18.626302Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4371-1","title":"libvirt vulnerabilities","description":"It was discovered that libvirt incorrectly handled an active pool without a\ntarget path. A remote attacker could possibly use this issue to cause\nlibvirt to crash, resulting in a denial of service. (CVE-2020-10703)\n\nIt was discovered that libvirt incorrectly handled memory when retrieving\ncertain domain statistics. A remote attacker could possibly use this issue\nto cause libvirt to consume resources, resulting in a denial of service.\nThis issue only affected Ubuntu 19.10. (CVE-2020-12430)\n","status":"published","published":"2020-05-21T16:52:16Z","modified":"2026-04-22T10:05:49.058175Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}