libvirt vulnerabilities (Red Hat)
173 vulnerabilities.
-
libvirtRed Hat Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 7.8 High -
libvirtRed Hat Libvirt: swtpm privilege escalation via symlink following 7.8 High -
libvirtRed Hat Libvirt: denial of service in xml parsing 5.5 Medium -
libvirtRed Hat Qemu-kvm: vnc websocket handshake use-after-free 7.5 High -
libvirtRed Hat Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue 5.9 Medium -
libvirtRed Hat Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 6.2 Medium -
libvirtRed Hat Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 7.5 High -
libvirtRed Hat Libnbd: nbd server improper certificate validation 7.4 High -
libvirtRed Hat Qemu-kvm: 'qemu-img info' leads to host file read/write 7.8 High -
libvirtRed Hat Libvirt: stack use-after-free in virnetclientioeventloop() 6.2 Medium -
libvirtRed Hat Qemu: virtio: dma reentrancy issue leads to double free vulnerability 8.2 High -
libvirtRed Hat Libvirt: negative g_new0 length can lead to unbounded memory allocation 6.2 Medium -
libvirtRed Hat Libvirt: null pointer dereference in udevconnectlistallinterfaces() 5.0 Medium -
libvirtRed Hat Libvirt: off-by-one error in udevlistinterfacesbystatus() 5.5 Medium -
libvirtRed Hat Qemu: vnc: null pointer dereference in qemu_clipboard_request() 6.5 Medium -
libvirtRed Hat Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() 4.9 Medium -
libvirtRed Hat Qemu: improper ide controller reset can lead to mbr overwrite 6.4 Medium -
libvirtRed Hat Triggerable assertion due to race condition in hot-unplug 5.6 Medium -
libvirtRed Hat Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 6.5 Medium -
libvirtRed Hat Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 6.0 Medium -
libvirtRed Hat Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service 6.5 Medium -
libvirtRed Hat Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 7.5 High -
libvirtRed Hat A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... 5.5 Medium -
libvirtRed Hat TPM2.0 vulnerable to out-of-bounds read 5.5 Medium -
libvirtRed Hat TPM2.0 vulnerable to out-of-bounds write 7.8 High -
libvirtRed Hat An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The... 6.5 Medium -
libvirtRed Hat Important: virt:rhel and virt-devel:rhel security and bug fix update 7.8 High -
libvirtRed Hat An integer underflow issue was found in the QEMU VNC server while processing ClientCutText... 6.5 Medium -
libvirtRed Hat A vulnerability was found in libguestfs. This issue occurs while calculating the greatest... 6.5 Medium -
libvirtRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in... 7.8 High -
libvirtRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G... 7.8 High -
libvirtRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G... 7.8 High -
libvirtRed Hat A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through... 7.8 High -
libvirtRed Hat A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies... 4.8 Medium -
libvirtRed Hat A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not... 8.2 High -
libvirtRed Hat ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2.... 7.8 High -
libvirtRed Hat A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the... 8.2 High -
libvirtRed Hat A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled... 8.2 High -
libvirtRed Hat A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method... 4.3 Medium -
libvirtRed Hat A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not... 3.2 Low -
libvirtRed Hat A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with... 7.5 High -
libvirtRed Hat A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS... 3.1 Low -
libvirtRed Hat Out-of-bounds read in swtpm 6.2 Medium -
libvirtRed Hat A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This... 7.8 High -
libvirtRed Hat A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to... 6.5 Medium -
libvirtRed Hat A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user... 6.0 Medium -
libvirtRed Hat An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while... 6.5 Medium -
libvirtRed Hat A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in... 6.5 Medium -
libvirtRed Hat A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted... 4.3 Medium -
libvirtRed Hat A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute... 7.8 High - Show olderLoading…