libguestfs vulnerabilities (Red Hat)
134 vulnerabilities.
libguestfsRed Hatiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LowlibguestfsRed Hatlibslirp: use after free vulnerability cause a denial of service.7.5 HighlibguestfsRed HatA NULL pointer dereference was found in the libvirt API responsible introduced in upstream...6.5 MediumlibguestfsRed HatA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for...5.5 MediumlibguestfsRed Hatqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...5.7 MediumlibguestfsRed HatQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 LowlibguestfsRed HatAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 HighlibguestfsRed HatIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumlibguestfsRed Hattcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumlibguestfsRed HatTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...6.5 MediumlibguestfsRed Hatlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 HighlibguestfsRed Hatip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 HighlibguestfsRed HatThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x...8.8 HighlibguestfsRed HatThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before...8.8 HighlibguestfsRed HatIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would...7.8 HighlibguestfsRed HatIt was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients...8.8 HighlibguestfsRed Hatinterface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.7.5 HighlibguestfsRed HatA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin...8.8 HighlibguestfsRed HatMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 MediumlibguestfsRed HatMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 MediumlibguestfsRed HatMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 MediumlibguestfsRed HatMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 MediumlibguestfsRed HatAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...5.4 MediumlibguestfsRed HatAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially...7.0 HighlibguestfsRed HatA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...7.5 HighlibguestfsRed HatAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 HighlibguestfsRed HatAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...7.5 HighlibguestfsRed HatAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 HighlibguestfsRed Hattcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 MediumlibguestfsRed HatIn QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which...9.8 CriticallibguestfsRed HatOCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to...9.1 CriticallibguestfsRed HatThe guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or -...6.8 MediumlibguestfsRed Hatvirt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file...2.1 LowlibguestfsRed Hatlibguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly...4.7 Medium