libvirt vulnerabilities (Debian)
90 vulnerabilities.
libvirtDebianThe virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean...5.0 MediumlibvirtDebianThe qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk...5.8 MediumlibvirtDebianlibvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows...1.2 LowlibvirtDebianlibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...1.9 LowlibvirtDebianThe qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not...1.9 LowlibvirtDebianThe LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete...5.8 MediumlibvirtDebianlibvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and...4.3 MediumlibvirtDebianThe libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt...5.2 MediumlibvirtDebianRace condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows...3.3 LowlibvirtDebianMultiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)...6.8 MediumlibvirtDebianThe lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does...2.1 LowlibvirtDebianvirt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files...7.2 HighlibvirtDebianThe virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the...8.5 HighlibvirtDebianlibvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows...4.6 MediumlibvirtDebianThe virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent...5.0 MediumlibvirtDebianThe virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows...4.0 MediumlibvirtDebianlibvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via...2.1 LowlibvirtDebianThe virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the...6.9 MediumlibvirtDebianThe xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote...4.0 MediumlibvirtDebianThe qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured,...4.3 MediumlibvirtDebianDouble free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6...5.0 MediumlibvirtDebianThe qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to...4.0 MediumlibvirtDebianDouble free vulnerability in the virConnectListAllInterfaces method in interface...5.0 MediumlibvirtDebianThe remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x...4.0 MediumlibvirtDebianlibvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users...3.6 LowlibvirtDebianUse-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in...6.8 MediumlibvirtDebianThe virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to...5.0 MediumlibvirtDebianThe virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain*...3.5 LowlibvirtDebianlibvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...3.7 LowlibvirtDebianThe networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does...5.9 MediumlibvirtDebianThe virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8...4.4 MediumlibvirtDebianInteger overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of...4.0 MediumlibvirtDebianlibvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote...3.3 LowlibvirtDebianlibvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read...6.9 MediumlibvirtDebianRed Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged...2.1 LowlibvirtDebianRed Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user...4.4 MediumlibvirtDebianRed Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without...4.4 MediumlibvirtDebianRed Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to...4.4 MediumlibvirtDebianBuffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0...4.4 MediumlibvirtDebianMultiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which...7.2 High