libvirt vulnerabilities (Azure Linux)
14 vulnerabilities.
-
libvirtAzure Linux Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink 5.5 Medium -
libvirtAzure Linux Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 7.8 High -
libvirtAzure Linux Libvirt: swtpm privilege escalation via symlink following 7.8 High -
libvirtAzure Linux Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection 2.3 Low -
libvirtAzure Linux Libvirt: information disclosure via world-readable storage volume images during clone/convert 5.5 Medium -
libvirtAzure Linux Libvirt: information disclosure via world-readable vm snapshots 5.5 Medium -
libvirtAzure Linux Libvirt: denial of service in xml parsing 5.5 Medium -
libvirtAzure Linux Libvirt: stack use-after-free in virnetclientioeventloop() 6.2 Medium -
libvirtAzure Linux Libvirt: negative g_new0 length can lead to unbounded memory allocation 6.2 Medium -
libvirtAzure Linux Libvirt: null pointer dereference in udevconnectlistallinterfaces() 5.0 Medium -
libvirtAzure Linux Libvirt: off-by-one error in udevlistinterfacesbystatus() 5.5 Medium -
libvirtAzure Linux A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... 5.5 Medium -
libvirtAzure Linux A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent... 6.5 Medium -
libvirtAzure Linux A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,... 6.7 Medium