LI
Product
Libvirt
9
CVEs
0
On KEV
5.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Libvirt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5160 | 5.5 | Aug 20 | libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a… Affected: before 2.2 |
| CVE-2014-3657 | – | Oct 6 | The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial… Affected: through 1.2.8; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +3 more |
| CVE-2014-3633 | – | Oct 6 | The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to… Affected: through 1.2.8; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +3 more |
| CVE-2010-2242 | – | Aug 19 | Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by… Affected: 0.2.0; 0.2.1; 0.2.2; 0.2.3; 0.3.0; 0.3.1; +27 more |
| CVE-2010-2239 | – | Aug 19 | Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the… Affected: 0.6.0; 0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; +11 more |
| CVE-2010-2238 | – | Aug 19 | Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users… Affected: 0.7.2; 0.7.3; 0.7.4; 0.7.5; 0.7.6; 0.7.7; +3 more |
| CVE-2010-2237 | – | Aug 19 | Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read… Affected: 0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; 0.7.0; +10 more |
| CVE-2009-0036 | – | Feb 11 | Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header… Affected: 0.5.1 |
| CVE-2008-5086 | – | Dec 19 | Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform… Affected: 0.3.2; 0.3.3; 0.4.1; 0.4.2; 0.4.6; 0.5.0; +1 more |
Showing 9