libvirt vulnerabilities (Debian)
90 vulnerabilities.
-
libvirtDebian Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink 5.5 Medium -
libvirtDebian Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 7.8 High -
libvirtDebian Libvirt: swtpm privilege escalation via symlink following 7.8 High -
libvirtDebian libvirt vulnerabilities No score -
libvirtDebian Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection 2.3 Low -
libvirtDebian Libvirt: information disclosure via world-readable storage volume images during clone/convert 5.5 Medium -
libvirtDebian libvirt - security update No score -
libvirtDebian Libvirt: information disclosure via world-readable vm snapshots 5.5 Medium -
libvirtDebian Libvirt: denial of service in xml parsing 5.5 Medium -
libvirtDebian Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 6.2 Medium -
libvirtDebian Libvirt: stack use-after-free in virnetclientioeventloop() 6.2 Medium -
libvirtDebian Libvirt: negative g_new0 length can lead to unbounded memory allocation 6.2 Medium -
libvirtDebian Libvirt: null pointer dereference in udevconnectlistallinterfaces() 5.0 Medium -
libvirtDebian Libvirt: off-by-one error in udevlistinterfacesbystatus() 5.5 Medium -
libvirtDebian Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service 6.5 Medium -
libvirtDebian A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... 5.5 Medium -
libvirtDebian A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method... 4.3 Medium -
libvirtDebian A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself... 6.5 Medium -
libvirtDebian A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in... 6.5 Medium -
libvirtDebian An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It... 6.5 Medium -
libvirtDebian A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels... 6.3 Medium -
libvirtDebian A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent... 6.5 Medium -
libvirtDebian A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,... 6.7 Medium -
libvirtDebian A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the... 8.8 High -
libvirtDebian An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0... 6.5 Medium -
libvirtDebian A NULL pointer dereference was found in the libvirt API responsible introduced in upstream... 6.5 Medium -
libvirtDebian qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query... 5.7 Medium -
libvirtDebian The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x... 8.8 High -
libvirtDebian The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before... 8.8 High -
libvirtDebian It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would... 7.8 High -
libvirtDebian It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients... 8.8 High -
libvirtDebian A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin... 8.8 High -
libvirtDebian libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with... 7.5 High -
libvirtDebian An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission... 5.4 Medium -
libvirtDebian A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets... 5.8 Medium -
libvirtDebian A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty... 7.7 High -
libvirtDebian libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block... 5.5 Medium -
libvirtDebian libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an... 7.5 High -
libvirtDebian util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which... 7.8 High -
libvirtDebian qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption)... 7.5 High -
libvirtDebian libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no"... 8.1 High -
libvirtDebian libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is... 9.8 Critical -
libvirtDebian The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users... 6.5 Medium -
libvirtDebian Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage... 2.5 Low -
libvirtDebian libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the... 3.5 Low -
libvirtDebian The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly... 4.0 Medium -
libvirtDebian The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check... 2.1 Low -
libvirtDebian The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c... 2.1 Low -
libvirtDebian The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used,... 4.3 Medium -
libvirtDebian The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the... 5.0 Medium - Show olderLoading…