Redhat Libvirt vulnerabilities

• redhat libvirt, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libvirt: crash of virtinterfaced via virconnectlistinterfaces() CVE-2024-8235 Fix available 6.2 MediumAugust 30, 2024
• redhat libvirt, debian linux, red hat enterprise linux 6 +5 more +7 more Libvirt: null pointer dereference in udevconnectlistallinterfaces() CVE-2024-2496 Fix available 5.0 MediumMarch 16, 2024
• redhat libvirt, red hat enterprise linux 6, enterprise linux 7 +4 more +6 more Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service CVE-2023-3750 Fix available 6.5 MediumJuly 19, 2023
• redhat libvirt, fedoraproject fedora, redhat enterprise linux +2 more A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... CVE-2023-2700 Fix available 5.5 MediumMay 15, 2023
• redhat libvirt, netapp ontap select deploy administration utility +1 more A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method... CVE-2022-0897 Fix available 4.3 MediumMarch 25, 2022
• redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 more A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself... CVE-2021-4147 Fix available 6.5 MediumJanuary 4, 2022
• redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 more A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in... CVE-2021-3975 Public exploitFix available 6.5 MediumNovember 24, 2021
• redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 more An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It... CVE-2021-3667 Fix available 6.5 MediumAugust 23, 2021
• redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 more A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels... CVE-2021-3631 Fix available 6.3 MediumJuly 27, 2021
• redhat libvirt A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent... CVE-2020-10701 Fix available 6.5 MediumMay 27, 2021
• redhat libvirt, netapp ontap select deploy administration utility +1 more A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It... CVE-2021-3559 6.5 MediumMay 24, 2021
• redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP... CVE-2020-14301 6.5 MediumNovember 3, 2020
• redhat libvirt, opensuse leap +1 more A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,... CVE-2020-25637 Public exploitFix available 6.7 MediumOctober 2, 2020
• redhat libvirt, enterprise linux +1 more A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the... CVE-2020-14339 Fix available 8.8 HighAugust 13, 2020
• redhat libvirt, enterprise linux +1 more An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0... CVE-2020-12430 Fix available 6.5 MediumApril 28, 2020
• libvirt A NULL pointer dereference was found in the libvirt API responsible introduced in upstream... CVE-2020-10703 Fix available 6.5 MediumApril 13, 2020
• redhat libvirt, debian linux, fedoraproject fedora +2 more qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query... CVE-2019-20485 Fix available 5.7 MediumMarch 19, 2020
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x... CVE-2019-10168 Fix available 8.8 HighJune 21, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before... CVE-2019-10167 Fix available 8.8 HighJune 20, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would... CVE-2019-10166 Fix available 7.8 HighJune 20, 2019
• libvirt, canonical ubuntu linux, redhat enterprise linux +2 more +4 more It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients... CVE-2019-10161 Fix available 8.8 HighJune 20, 2019
• libvirt, fedoraproject fedora +1 more A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin... CVE-2019-10132 Fix available 8.8 HighMay 21, 2019
• redhat libvirt, debian linux +1 more libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with... CVE-2016-10746 Fix available 7.5 HighApril 18, 2019
• redhat libvirt, fedoraproject fedora, opensuse leap +2 more An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission... CVE-2019-3886 Fix available 5.4 MediumApril 4, 2019
• redhat libvirt, opensuse leap +1 more A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets... CVE-2019-3840 Fix available 5.8 MediumFebruary 27, 2019
• redhat libvirt A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty... CVE-2017-2635 Fix available 7.7 HighAugust 22, 2018
• libvirt, debian linux +1 more libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an... CVE-2018-1064 Fix available 7.5 HighMarch 14, 2018
• redhat libvirt, canonical ubuntu linux, debian linux +4 more +6 more util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which... CVE-2018-6764 Fix available 7.8 HighFebruary 7, 2018
• redhat libvirt, debian linux, redhat enterprise linux desktop +5 more +7 more qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption)... CVE-2018-5748 Fix available 7.5 HighJanuary 25, 2018
• redhat libvirt, debian linux +1 more libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no"... CVE-2017-1000256 Fix available 8.1 HighOctober 19, 2017
• redhat libvirt, debian linux +1 more libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is... CVE-2016-5008 Fix available 9.8 CriticalJuly 1, 2016
• redhat libvirt, xen +1 more The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a... CVE-2014-3672 Fix available 6.5 MediumMay 25, 2016
• redhat libvirt, canonical ubuntu linux +1 more The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users... CVE-2015-5247 Fix available 6.5 MediumApril 14, 2016
• redhat libvirt Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage... CVE-2015-5313 Fix available 2.5 LowDecember 18, 2015
• redhat libvirt, canonical ubuntu linux, mageia +4 more +6 more libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the... CVE-2015-0236 Fix available 3.5 LowJanuary 29, 2015
• redhat libvirt The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly... CVE-2014-8131 Fix available 4.0 MediumJanuary 6, 2015
• redhat libvirt The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check... CVE-2014-8135 Fix available 2.1 LowDecember 19, 2014
• redhat libvirt, canonical ubuntu linux, mageia +5 more +7 more The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c... CVE-2014-8136 Fix available 2.1 LowDecember 19, 2014
• redhat libvirt The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used,... CVE-2013-4399 Fix available 4.3 MediumDecember 12, 2014
• redhat libvirt The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the... CVE-2014-7823 Fix available 5.0 MediumNovember 5, 2014
• redhat libvirt, opensuse, redhat enterprise linux +1 more +3 more libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows... CVE-2014-5177 Fix available 1.2 LowAugust 3, 2014
• redhat libvirt, opensuse, redhat enterprise linux +1 more +3 more libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read... CVE-2014-0179 Fix available 1.9 LowMay 29, 2014
• redhat libvirt, opensuse +1 more The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not... CVE-2013-7336 Fix available 1.9 LowMay 7, 2014
• redhat libvirt, fedoraproject fedora +1 more The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete... CVE-2013-6456 Fix available 5.8 MediumApril 15, 2014
• redhat libvirt libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and... CVE-2014-0028 Fix available 4.3 MediumJanuary 24, 2014
• redhat libvirt The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt... CVE-2013-6457 Fix available 5.2 MediumJanuary 24, 2014
• redhat libvirt Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows... CVE-2014-1447 Public exploitFix available 3.3 LowJanuary 17, 2014
• redhat libvirt Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3)... CVE-2013-6458 Fix available 6.8 MediumJanuary 17, 2014
• redhat libvirt The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does... CVE-2013-6436 Fix available 2.1 LowJanuary 7, 2014
• redhat libvirt virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files... CVE-2013-4400 Fix available 7.2 HighDecember 9, 2013
• Show olderLoading…