LI
Product
Libvirt
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 22Low 1
Watch
Add Libvirt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5008 | 9.8 | Jul 13 | libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and… Affected: through 1.3.5 |
| CVE-2020-14339 | 8.8 | Dec 3 | A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process Affected: 6.2.0 before 6.7.0 |
| CVE-2019-10132 | 8.8 | May 22 | A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units Affected: through 4.1.0 |
| CVE-2017-1000256 | 8.1 | Oct 31 | libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates… Affected: 2.3.0 before 3.9.0 |
| CVE-2019-10168 | 7.8 | Aug 2 | The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the… Affected: 4.0.0 before 4.10.1; 5.0.0 before 5.4.1 |
| CVE-2019-10167 | 7.8 | Aug 2 | The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing… Affected: 4.0.0 before 4.10.1; 5.0.0 before 5.4.1 |
| CVE-2019-10166 | 7.8 | Aug 2 | It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would… Affected: 4.0.0 before 4.10.1; 5.0.0 before 5.4.1 |
| CVE-2019-10161 | 7.8 | Jul 30 | It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which… Affected: before 4.10.1; 5.0.0 before 5.4.1 |
| CVE-2018-6764 | 7.8 | Feb 23 | util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism… Affected: All versions, or not specified |
| CVE-2016-10746 | 7.5 | Apr 18 | libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a… Affected: before 1.3.1 |
| CVE-2018-1064 | 7.5 | Mar 28 | libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via… Affected: through 4.1.0 |
| CVE-2018-5748 | 7.5 | Jan 25 | qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply Affected: All versions, or not specified |
| CVE-2020-25637 | 6.7 | Oct 6 | A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU… Affected: before 6.8.0 |
| CVE-2021-3975 | 6.5 | Aug 23 | A use-after-free flaw was found in libvirt Affected: before 7.1.0 |
| CVE-2021-4147 | 6.5 | Mar 25 | A flaw was found in the libvirt libxl driver Affected: before 2.33.0 |
| CVE-2021-3667 | 6.5 | Mar 2 | An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt Affected: 4.1.0 through 7.5.0 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: 6.2.0 before 6.3.0 |
| CVE-2020-10701 | 6.5 | May 27 | A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout Affected: before 6.2.0 |
| CVE-2021-3559 | 6.5 | May 24 | A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0 Affected: 6.10.0 before 7.0.0 |
| CVE-2020-10703 | 6.5 | Jun 2 | A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its… Affected: 3.10.0 before 6.0.0 |
| CVE-2020-12430 | 6.5 | Apr 28 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0 Affected: 4.10.0 before 6.1.0 |
| CVE-2017-2635 | 6.5 | Aug 22 | A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives Affected: 2.5.0 through 3.0.0 |
| CVE-2014-3672 | 6.5 | May 25 | The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr Affected: through 1.2.21 |
| CVE-2015-5247 | 6.5 | Apr 14 | The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by… Affected: 1.2.14; 1.2.15; 1.2.16; 1.2.17; 1.2.18; 1.2.19 |
| CVE-2021-3631 | 6.3 | Mar 2 | A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels Affected: before 7.5.0 |
| CVE-2019-3840 | 6.3 | Mar 27 | A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent Affected: before 5.0.0 |
| CVE-2024-8235 | 6.2 | Aug 30 | A flaw was found in libvirt Affected: 10.4.0 before 10.7.0 |
| CVE-2011-4600 | 5.9 | Apr 14 | The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted,… Affected: 0.9.8 |
| CVE-2019-20485 | 5.7 | Mar 19 | qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API… Affected: before 6.0.0 |
| CVE-2024-2496 | 5.5 | Mar 18 | A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt Affected: before 9.8.0 |
| CVE-2023-2700 | 5.5 | May 15 | A vulnerability was found in libvirt Affected: 4.5.0 |
| CVE-2019-3886 | 5.4 | Apr 4 | An incorrect permissions check was discovered in libvirt 4.8.0 and above Affected: 4.8.0 before 5.3.0 |
| CVE-2023-3750 | 5.3 | Jul 24 | A flaw was found in libvirt Affected: All versions, or not specified |
| CVE-2022-0897 | 4.3 | Mar 25 | A flaw was found in the libvirt nwfilter driver Affected: through 1.1.1 |
| CVE-2015-5313 | 2.5 | Apr 11 | Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are… Affected: All versions, or not specified |
| CVE-2015-0236 | – | Jan 29 | libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the… Affected: through 1.2.11; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +6 more |
| CVE-2014-8131 | – | Jan 6 | The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a… Affected: through 1.2.10 |
| CVE-2014-8136 | – | Dec 19 | The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local… Affected: All versions, or not specified |
| CVE-2014-8135 | – | Dec 19 | The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2013-4399 | – | Dec 12 | The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and… Affected: through 1.1.3; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2014-7823 | – | Nov 13 | The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use… Affected: through 1.2.10; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +5 more |
| CVE-2014-5177 | – | Aug 3 | libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +17 more |
| CVE-2014-0179 | – | Aug 3 | libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity… Affected: 0.7.5; 0.7.6; 0.7.7; 0.8.0; 0.8.1; 0.8.2; +34 more |
| CVE-2013-7336 | – | May 7 | The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows… Affected: through 1.1.2; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +10 more |
| CVE-2013-6456 | – | Apr 15 | The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on… Affected: 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; 1.0.5.1; +13 more |
| CVE-2014-1447 | – | Jan 24 | Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a… Affected: through 1.2.0; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2014-0028 | – | Jan 24 | libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object… Affected: 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.2.0 |
| CVE-2013-6458 | – | Jan 24 | Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do… Affected: through 1.2.0; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-6457 | – | Jan 24 | The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to… Affected: through 1.2.0; 0.0.1; 0.0.2; 0.0.3; 0.0.4; 0.0.5; +34 more |
| CVE-2013-6436 | – | Jan 7 | The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which… Affected: 1.0.5; 1.0.5.1; 1.0.5.2; 1.0.5.3; 1.0.5.4; 1.0.5.5; +8 more |