libvirt vulnerabilities (Red Hat)
173 vulnerabilities.
libvirtRed HatQEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an...3.3 LowlibvirtRed HatImportant: virt:rhel security update6.5 MediumlibvirtRed HatAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 MediumlibvirtRed Hathw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 MediumlibvirtRed HatA potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd)...3.3 LowlibvirtRed Hatiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LowlibvirtRed Hatlibslirp: use after free vulnerability cause a denial of service.7.5 HighlibvirtRed HatA NULL pointer dereference was found in the libvirt API responsible introduced in upstream...6.5 MediumlibvirtRed HatA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for...5.5 MediumlibvirtRed Hatqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...5.7 MediumlibvirtRed HatQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 LowlibvirtRed HatAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 HighlibvirtRed HatIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumlibvirtRed Hattcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumlibvirtRed HatTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...6.5 MediumlibvirtRed Hatlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 HighlibvirtRed Hatip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 HighlibvirtRed HatThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x...8.8 HighlibvirtRed HatThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before...8.8 HighlibvirtRed HatIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would...7.8 HighlibvirtRed HatIt was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients...8.8 HighlibvirtRed Hatinterface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.7.5 HighlibvirtRed HatA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin...8.8 HighlibvirtRed HatMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 MediumlibvirtRed HatMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 MediumlibvirtRed HatMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 MediumlibvirtRed HatMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 MediumlibvirtRed HatAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...5.4 MediumlibvirtRed HatAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially...7.0 HighlibvirtRed HatA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...7.5 HighlibvirtRed HatAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 HighlibvirtRed HatAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...7.5 HighlibvirtRed HatAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...7.5 HighlibvirtRed Hattcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 MediumlibvirtRed HatA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...5.8 MediumlibvirtRed HatIn QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which...9.8 CriticallibvirtRed Hatlibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...5.5 MediumlibvirtRed Hatlinux-4.9 - security update5.5 MediumlibvirtRed Hatlibvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an...7.5 HighlibvirtRed Hatutil/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which...7.8 HighlibvirtRed Hatqemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption)...7.5 HighlibvirtRed HatImportant: kernel security, bug fix, and enhancement update5.6 MediumlibvirtRed Hatlibvirt before 2.0.0 improperly disables password checking when the password on a VNC server is...9.8 CriticallibvirtRed HatDirectory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage...2.5 LowlibvirtRed Hatlibvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the...3.5 LowlibvirtRed HatThe (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c...2.1 LowlibvirtRed HatThe virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the...5.0 MediumlibvirtRed HatThe virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean...5.0 MediumlibvirtRed HatThe qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk...5.8 MediumlibvirtRed Hatlibvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows...1.2 Low- Show moreLoading…