{"id":"CVE-2021-4147","aliases":["DEBIAN-CVE-2021-4147","DLA-3778-1","EUVD-2021-34015","GHSA-hh52-g3xv-6xxc","SUSE-SU-2022:0021-1","SUSE-SU-2022:0031-1","SUSE-SU-2022:0032-1","SUSE-SU-2022:0041-1","SUSE-SU-2022:0042-1","SUSE-SU-2022:0045-1","SUSE-SU-2022:0045-2","SUSE-SU-2022:0128-1","UBUNTU-CVE-2021-4147","USN-5399-1","USN-8652-1","openSUSE-SU-2022:0021-1","openSUSE-SU-2024:11758-1"],"status":"published","title":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00244,"percentile":0.15691,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-667"],"published":"2022-01-04T15:06:20Z","modified":"2026-10-23T18:04:38Z","fixes":[{"ecosystem":"Debian:12","package":"libvirt","fixed_in":["7.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libvirt","fixed_in":["7.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libvirt","fixed_in":["7.10.0-2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libvirt","fixed_in":["7.1.0-6.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"libvirt","fixed_in":["7.1.0-6.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libvirt","fixed_in":["7.1.0-6.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","fixed_in":["1.3.1-1ubuntu10.31+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","fixed_in":["4.0.0-1ubuntu8.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libvirt","fixed_in":["6.0.0-0ubuntu8.16"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libvirt","fixed_in":["7.1.0-6.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libvirt","fixed_in":["8.0.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-4+deb10u2"}]}],"versions":["5.0.0-4","5.0.0-4+deb10u1"],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-6.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-6.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-6.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-9.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.28.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.28.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-13.28.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-8.26.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-13.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1","1.2.2-0ubuntu13.1.28+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.31+esm1"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.16"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.16"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-0ubuntu13.1.28+esm2"}]}],"versions":["1.1.1-0ubuntu8","1.1.1-0ubuntu9","1.1.4-0ubuntu2","1.1.4-0ubuntu3","1.1.4-0ubuntu4","1.1.4-0ubuntu5","1.2.0-0ubuntu1","1.2.0-0ubuntu2","1.2.0-0ubuntu3","1.2.1-0ubuntu1","1.2.1-0ubuntu2","1.2.1-0ubuntu3","1.2.1-0ubuntu4","1.2.1-0ubuntu5","1.2.1-0ubuntu7","1.2.1-0ubuntu8","1.2.1-0ubuntu9","1.2.1-0ubuntu10","1.2.2-0ubuntu1","1.2.2-0ubuntu2","1.2.2-0ubuntu3","1.2.2-0ubuntu4","1.2.2-0ubuntu5","1.2.2-0ubuntu6","1.2.2-0ubuntu7","1.2.2-0ubuntu8","1.2.2-0ubuntu9","1.2.2-0ubuntu10","1.2.2-0ubuntu11","1.2.2-0ubuntu12","1.2.2-0ubuntu13","1.2.2-0ubuntu13.1","1.2.2-0ubuntu13.1.1","1.2.2-0ubuntu13.1.2","1.2.2-0ubuntu13.1.4","1.2.2-0ubuntu13.1.5","1.2.2-0ubuntu13.1.6","1.2.2-0ubuntu13.1.7","1.2.2-0ubuntu13.1.8","1.2.2-0ubuntu13.1.9","1.2.2-0ubuntu13.1.10","1.2.2-0ubuntu13.1.12","1.2.2-0ubuntu13.1.14","1.2.2-0ubuntu13.1.16","1.2.2-0ubuntu13.1.17","1.2.2-0ubuntu13.1.20","1.2.2-0ubuntu13.1.21","1.2.2-0ubuntu13.1.22","1.2.2-0ubuntu13.1.23","1.2.2-0ubuntu13.1.25","1.2.2-0ubuntu13.1.26","1.2.2-0ubuntu13.1.27","1.2.2-0ubuntu13.1.28","1.2.2-0ubuntu13.1.28+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1ubuntu10.31+esm1"}]}],"versions":["1.2.16-2ubuntu11","1.2.16-2ubuntu12","1.2.16-2ubuntu13","1.2.16-2ubuntu14","1.2.21-2ubuntu1","1.2.21-2ubuntu3","1.2.21-2ubuntu4","1.2.21-2ubuntu5","1.2.21-2ubuntu7","1.2.21-2ubuntu8","1.2.21-2ubuntu9","1.2.21-2ubuntu10","1.3.1-1ubuntu1","1.3.1-1ubuntu2","1.3.1-1ubuntu3","1.3.1-1ubuntu4","1.3.1-1ubuntu6","1.3.1-1ubuntu9","1.3.1-1ubuntu10","1.3.1-1ubuntu10.1","1.3.1-1ubuntu10.2","1.3.1-1ubuntu10.3","1.3.1-1ubuntu10.5","1.3.1-1ubuntu10.6","1.3.1-1ubuntu10.7","1.3.1-1ubuntu10.8","1.3.1-1ubuntu10.10","1.3.1-1ubuntu10.11","1.3.1-1ubuntu10.12","1.3.1-1ubuntu10.13","1.3.1-1ubuntu10.14","1.3.1-1ubuntu10.15","1.3.1-1ubuntu10.17","1.3.1-1ubuntu10.18","1.3.1-1ubuntu10.19","1.3.1-1ubuntu10.21","1.3.1-1ubuntu10.22","1.3.1-1ubuntu10.23","1.3.1-1ubuntu10.24","1.3.1-1ubuntu10.25","1.3.1-1ubuntu10.26","1.3.1-1ubuntu10.27","1.3.1-1ubuntu10.29","1.3.1-1ubuntu10.30","1.3.1-1ubuntu10.31"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-1ubuntu8.21+esm1"}]}],"versions":["3.6.0-1ubuntu5","3.6.0-1ubuntu6","4.0.0-1ubuntu1","4.0.0-1ubuntu2","4.0.0-1ubuntu3","4.0.0-1ubuntu4","4.0.0-1ubuntu5","4.0.0-1ubuntu6","4.0.0-1ubuntu7","4.0.0-1ubuntu8","4.0.0-1ubuntu8.1","4.0.0-1ubuntu8.2","4.0.0-1ubuntu8.3","4.0.0-1ubuntu8.4","4.0.0-1ubuntu8.5","4.0.0-1ubuntu8.6","4.0.0-1ubuntu8.7","4.0.0-1ubuntu8.8","4.0.0-1ubuntu8.9","4.0.0-1ubuntu8.10","4.0.0-1ubuntu8.11","4.0.0-1ubuntu8.12","4.0.0-1ubuntu8.13","4.0.0-1ubuntu8.14","4.0.0-1ubuntu8.15","4.0.0-1ubuntu8.16","4.0.0-1ubuntu8.17","4.0.0-1ubuntu8.19","4.0.0-1ubuntu8.20","4.0.0-1ubuntu8.21"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0-0ubuntu8.20+esm1"}]}],"versions":["5.4.0-0ubuntu5","6.0.0-0ubuntu1","6.0.0-0ubuntu2","6.0.0-0ubuntu3","6.0.0-0ubuntu4","6.0.0-0ubuntu5","6.0.0-0ubuntu6","6.0.0-0ubuntu7","6.0.0-0ubuntu8","6.0.0-0ubuntu8.1","6.0.0-0ubuntu8.2","6.0.0-0ubuntu8.3","6.0.0-0ubuntu8.4","6.0.0-0ubuntu8.5","6.0.0-0ubuntu8.7","6.0.0-0ubuntu8.8","6.0.0-0ubuntu8.9","6.0.0-0ubuntu8.10","6.0.0-0ubuntu8.11","6.0.0-0ubuntu8.12","6.0.0-0ubuntu8.13","6.0.0-0ubuntu8.14","6.0.0-0ubuntu8.15","6.0.0-0ubuntu8.16","6.0.0-0ubuntu8.19","6.0.0-0ubuntu8.20"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1ubuntu7.19"}]}],"versions":["7.6.0-0ubuntu1","7.6.0-0ubuntu3","8.0.0-1ubuntu3","8.0.0-1ubuntu4","8.0.0-1ubuntu5","8.0.0-1ubuntu6","8.0.0-1ubuntu7","8.0.0-1ubuntu7.1","8.0.0-1ubuntu7.2","8.0.0-1ubuntu7.3","8.0.0-1ubuntu7.4","8.0.0-1ubuntu7.5","8.0.0-1ubuntu7.6","8.0.0-1ubuntu7.7","8.0.0-1ubuntu7.8","8.0.0-1ubuntu7.9","8.0.0-1ubuntu7.10","8.0.0-1ubuntu7.11","8.0.0-1ubuntu7.12","8.0.0-1ubuntu7.13","8.0.0-1ubuntu7.14","8.0.0-1ubuntu7.15","8.0.0-1ubuntu7.16","8.0.0-1ubuntu7.17","8.0.0-1ubuntu7.18"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0-2ubuntu8.16"}]}],"versions":["9.6.0-1ubuntu1","9.6.0-1ubuntu2","10.0.0-1ubuntu1","10.0.0-2ubuntu1","10.0.0-2ubuntu5","10.0.0-2ubuntu7","10.0.0-2ubuntu8","10.0.0-2ubuntu8.1","10.0.0-2ubuntu8.2","10.0.0-2ubuntu8.3","10.0.0-2ubuntu8.4","10.0.0-2ubuntu8.5","10.0.0-2ubuntu8.6","10.0.0-2ubuntu8.7","10.0.0-2ubuntu8.8","10.0.0-2ubuntu8.9","10.0.0-2ubuntu8.10","10.0.0-2ubuntu8.11","10.0.0-2ubuntu8.12","10.0.0-2ubuntu8.13","10.0.0-2ubuntu8.14","10.0.0-2ubuntu8.15"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0-1ubuntu5.3"}]}],"versions":["11.6.0-1ubuntu3","11.6.0-1ubuntu5","11.6.0-1ubuntu6","11.6.0-1ubuntu7","11.6.0-1ubuntu8","12.0.0-1ubuntu3","12.0.0-1ubuntu5","12.0.0-1ubuntu5.1","12.0.0-1ubuntu5.2"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0-6.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"redhat","product":"libvirt"},{"vendor":"ubuntu","product":"libvirt"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034195","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20220513-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4147"},{"url":"https://security.netapp.com/advisory/ntap-20220513-0004"},{"url":"https://github.com/advisories/GHSA-hh52-g3xv-6xxc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4147","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220021-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191668","tags":["report"]},{"url":"https://bugzilla.suse.com/1192017","tags":["report"]},{"url":"https://bugzilla.suse.com/1193623","tags":["report"]},{"url":"https://bugzilla.suse.com/1193719","tags":["report"]},{"url":"https://bugzilla.suse.com/1193981","tags":["report"]},{"url":"https://bugzilla.suse.com/1194041","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4147","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220031-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192876","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3975","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220032-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190420","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220041-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220042-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220045-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183411","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220045-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220128-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4147","tags":["report"]},{"url":"https://listman.redhat.com/archives/libvir-list/2021-November/msg00908.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5399-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4147","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8652-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-1441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2494","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-2496","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-61477","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-61478","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-63623","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4GRZCYHIJFWN3FE3P7JJYRY7F7UO2HTA/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-4147","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T00:00:00Z","modified":"2024-08-03T17:16:04.272Z","cwes":["CWE-667"],"updated_at":"2026-11-02T14:33:08.045407Z"}],"euvd":[{"id":"EUVD-2021-34015","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T00:00:00Z","modified":"2024-08-03T17:16:04Z","updated_at":"2026-11-03T03:25:10.888157Z"}],"ghsa":[{"id":"GHSA-hh52-g3xv-6xxc","title":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-26T00:00:30Z","modified":"2024-04-01T15:30:28Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:55:45.740984Z"}],"nvd":[{"id":"CVE-2021-4147","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T19:15:09.643Z","modified":"2026-06-17T04:19:07.007Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-667"],"updated_at":"2026-11-02T14:07:05.581807Z"}],"osv":[{"id":"CVE-2021-4147","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T19:15:09.643Z","modified":"2026-03-14T11:14:35.591015Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-4147","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T19:15:09.643Z","modified":"2026-10-23T18:04:38.581247974Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-4147","description":"A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.","status":"published","published":"2022-03-25T19:15:00Z","modified":"2026-08-20T05:27:00.296456125Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-3778-1","title":"libvirt - security update","status":"published","published":"2024-04-01T00:00:00Z","modified":"2026-03-09T01:19:38.588428Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2022:0021-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n","status":"published","published":"2022-01-04T15:06:20Z","modified":"2026-02-04T04:17:01.290501Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11758-1","title":"libvirt-8.0.0-1.1 on GA media","description":"These are all security issues fixed in the libvirt-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:41:28.723242Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0021-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n","status":"published","published":"2022-01-04T15:06:23Z","modified":"2026-02-04T02:48:30.002282Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0031-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-05T16:19:46Z","modified":"2026-02-04T02:44:31.77684Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0032-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-05T16:20:11Z","modified":"2026-02-04T04:10:46.775239Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0041-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-10T11:04:46Z","modified":"2026-02-04T03:31:02.146541Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0042-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-10T11:05:24Z","modified":"2026-02-04T04:31:57.192816Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0045-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-11T07:52:10Z","modified":"2025-05-02T04:31:47.591199Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0045-2","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-02-17T07:40:38Z","modified":"2026-02-04T03:17:47.641399Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0128-1","title":"Security update for libvirt","description":"This update for libvirt fixes the following issues:\n\n- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)\n- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)\n","status":"published","published":"2022-01-19T10:22:41Z","modified":"2026-02-04T04:05:57.998379Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5399-1","title":"libvirt vulnerabilities","description":"It was discovered that libvirt incorrectly handled certain locking\noperations. A local attacker could possibly use this issue to cause libvirt\nto stop accepting connections, resulting in a denial of service. This issue\nonly affected Ubuntu 20.04 LTS. (CVE-2021-3667)\n\nIt was discovered that libvirt incorrectly handled threads during shutdown.\nA local attacker could possibly use this issue to cause libvirt to crash,\nresulting in a denial of service. This issue only affected Ubuntu 18.04 LTS\nand Ubuntu 20.04 LTS. (CVE-2021-3975)\n\nIt was discovered that libvirt incorrectly handled the libxl driver. An\nattacker inside a guest could possibly use this issue to cause libvirtd\nto crash or stop responding, resulting in a denial of service. This issue\nonly affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10.\n(CVE-2021-4147)\n\nIt was discovered that libvirt incorrectly handled the nwfilter driver. A\nlocal attacker could possibly use this issue to cause libvirt to crash,\nresulting in a denial of service. (CVE-2022-0897)\n\nIt was discovered that libvirt incorrectly handled the polkit access\ncontrol driver. A local attacker could possibly use this issue to cause\nlibvirt to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-25637)\n\nIt was discovered that libvirt incorrectly generated SELinux labels. In\nenvironments using SELinux, this issue could allow the sVirt confinement\nto be bypassed. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04\nLTS. (CVE-2021-3631)\n","status":"published","published":"2022-05-02T17:01:25Z","modified":"2026-04-27T16:19:02.263201949Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-8652-1","title":"libvirt vulnerabilities","description":"It was discovered that libvirt incorrectly handled guest reboots in the\nlibxl driver. An attacker in a guest could possibly use this issue to\ncause the libvirt daemon to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)\n\nAlexander Kuznetsov discovered that libvirt incorrectly handled listing\nnetwork interfaces. An attacker could possibly use this issue to cause\nthe libvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-1441)\n\nIt was discovered that libvirt incorrectly handled certain values in its\nRPC library. An attacker could possibly use this issue to cause the\nlibvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-2494)\n\nIt was discovered that libvirt incorrectly handled listing network\ninterfaces under certain circumstances. An attacker could possibly use\nthis issue to cause the libvirt daemon to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2024-2496)\n\nIt was discovered that libvirt incorrectly set permissions on external\ninactive snapshots, making them world-readable. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2025-13193)\n\nIt was discovered that libvirt incorrectly handled certain characters in\nvirtual network definitions. An authenticated user could possibly use\nthis issue to inject arbitrary configuration directives and execute\narbitrary code as root. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61477)\n\nIt was discovered that libvirt incorrectly handled certain XML input. An\nattacker could possibly use this issue to cause the libvirt daemon to\ncrash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt incorrectly followed symbolic links when\nchanging file ownership. A local attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)\n\nIt was discovered that libvirt incorrectly set permissions on images\nduring storage volume clone and convert operations, making them\ntemporarily world-readable. A local attacker could possibly use this\nissue to obtain sensitive information. (CVE-2026-63623)","status":"published","published":"2026-08-19T16:56:44Z","modified":"2026-08-20T05:29:28.368157919Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}