libvirt vulnerabilities (Alpaquita)

12 vulnerabilities.

• libvirt Alpaquita Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink CVE-2026-77159 Fix available 5.5 MediumAugust 27, 2026
• libvirt Alpaquita Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow CVE-2026-18917 Fix available 7.8 HighAugust 20, 2026
• libvirt Alpaquita Libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 Fix available 7.8 HighAugust 10, 2026
• libvirt Alpaquita libvirt vulnerabilities CVE-2026-61478 Fix available No scoreAugust 8, 2026
• libvirt Alpaquita Libvirt: information disclosure via world-readable vm snapshots CVE-2025-13193 Fix available 5.5 MediumNovember 17, 2025
• libvirt Alpaquita Libvirt: denial of service in xml parsing CVE-2025-12748 Public exploitFix available 5.5 MediumNovember 11, 2025
• libvirt Alpaquita Libvirt: crash of virtinterfaced via virconnectlistinterfaces() CVE-2024-8235 Fix available 6.2 MediumAugust 30, 2024
• libvirt Alpaquita Libvirt: stack use-after-free in virnetclientioeventloop() CVE-2024-4418 Fix available 6.2 MediumMay 3, 2024
• libvirt Alpaquita Libvirt: negative g_new0 length can lead to unbounded memory allocation CVE-2024-2494 Fix available 6.2 MediumMarch 20, 2024
• libvirt Alpaquita Libvirt: null pointer dereference in udevconnectlistallinterfaces() CVE-2024-2496 Fix available 5.0 MediumMarch 16, 2024
• libvirt Alpaquita Libvirt: off-by-one error in udevlistinterfacesbystatus() CVE-2024-1441 Public exploitFix available 5.5 MediumMarch 11, 2024
• libvirt Alpaquita A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... CVE-2023-2700 Fix available 5.5 MediumMay 15, 2023