Skip to content

Redhat Libvirt vulnerabilities

redhat libvirtThe virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the...CVE-2013-4401Fix available8.5 HighNovember 2, 2013
redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 morelibvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows...CVE-2013-4311Fix available4.6 MediumOctober 3, 2013
redhat libvirtThe virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent...CVE-2013-5651Fix available5.0 MediumSeptember 30, 2013
redhat libvirtThe virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows...CVE-2013-4297Fix available4.0 MediumSeptember 30, 2013
redhat libvirtlibvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via...CVE-2013-4292Fix available2.1 LowSeptember 30, 2013
redhat libvirtThe virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the...CVE-2013-4291Fix available6.9 MediumSeptember 30, 2013
redhat libvirtThe xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote...CVE-2013-4239Fix available4.0 MediumSeptember 30, 2013
redhat libvirtThe qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured,...CVE-2013-4154Fix available4.3 MediumSeptember 30, 2013
redhat libvirtDouble free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6...CVE-2013-4153Fix available5.0 MediumSeptember 30, 2013
redhat libvirtThe qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to...CVE-2013-2230Fix available4.0 MediumSeptember 30, 2013
redhat libvirtDouble free vulnerability in the virConnectListAllInterfaces method in interface...CVE-2013-2218Public exploitFix available5.0 MediumSeptember 30, 2013
redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 moreThe remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x...CVE-2013-4296Fix available4.0 MediumSeptember 25, 2013
redhat libvirtThe remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5...CVE-2013-1962Fix available5.0 MediumMay 29, 2013
redhat libvirtlibvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users...CVE-2013-1766Fix available3.6 LowMarch 15, 2013
redhat libvirt, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreUse-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in...CVE-2013-0170Fix available6.8 MediumFebruary 8, 2013
redhat libvirtThe virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to...CVE-2012-4423Fix available5.0 MediumNovember 19, 2012
redhat libvirtThe virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain*...CVE-2012-3445Fix available3.5 LowAugust 7, 2012
redhat libvirtlibvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when...CVE-2012-2693Fix available3.7 LowJune 17, 2012
redhat libvirt, canonical ubuntu linux +1 moreThe networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does...CVE-2011-4600Fix available5.9 MediumDecember 31, 2011
redhat libvirtThe virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8...CVE-2011-2178Fix available4.4 MediumAugust 10, 2011
redhat libvirtInteger overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of...CVE-2011-2511Fix available4.0 MediumJuly 19, 2011
redhat libvirtlibvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote...CVE-2011-1486Fix available3.3 LowMay 31, 2011
redhat libvirtlibvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read...CVE-2011-1146Fix available6.9 MediumMarch 15, 2011