LI
Product
Libvirt
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 22Low 1
Watch
Add Libvirt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25637 | 6.7 | Oct 6 | A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU… Affected: before 6.8.0 |
| CVE-2021-3975 | 6.5 | Aug 23 | A use-after-free flaw was found in libvirt Affected: before 7.1.0 |
| CVE-2021-4147 | 6.5 | Mar 25 | A flaw was found in the libvirt libxl driver Affected: before 2.33.0 |
| CVE-2021-3667 | 6.5 | Mar 2 | An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt Affected: 4.1.0 through 7.5.0 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: 6.2.0 before 6.3.0 |
| CVE-2020-10701 | 6.5 | May 27 | A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout Affected: before 6.2.0 |
| CVE-2021-3559 | 6.5 | May 24 | A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0 Affected: 6.10.0 before 7.0.0 |
| CVE-2020-10703 | 6.5 | Jun 2 | A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its… Affected: 3.10.0 before 6.0.0 |
| CVE-2020-12430 | 6.5 | Apr 28 | An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0 Affected: 4.10.0 before 6.1.0 |
| CVE-2017-2635 | 6.5 | Aug 22 | A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives Affected: 2.5.0 through 3.0.0 |
| CVE-2014-3672 | 6.5 | May 25 | The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr Affected: through 1.2.21 |
| CVE-2015-5247 | 6.5 | Apr 14 | The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by… Affected: 1.2.14; 1.2.15; 1.2.16; 1.2.17; 1.2.18; 1.2.19 |
| CVE-2021-3631 | 6.3 | Mar 2 | A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels Affected: before 7.5.0 |
| CVE-2019-3840 | 6.3 | Mar 27 | A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent Affected: before 5.0.0 |
| CVE-2024-8235 | 6.2 | Aug 30 | A flaw was found in libvirt Affected: 10.4.0 before 10.7.0 |
| CVE-2011-4600 | 5.9 | Apr 14 | The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted,… Affected: 0.9.8 |
| CVE-2019-20485 | 5.7 | Mar 19 | qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API… Affected: before 6.0.0 |
| CVE-2024-2496 | 5.5 | Mar 18 | A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt Affected: before 9.8.0 |
| CVE-2023-2700 | 5.5 | May 15 | A vulnerability was found in libvirt Affected: 4.5.0 |
| CVE-2019-3886 | 5.4 | Apr 4 | An incorrect permissions check was discovered in libvirt 4.8.0 and above Affected: 4.8.0 before 5.3.0 |
| CVE-2023-3750 | 5.3 | Jul 24 | A flaw was found in libvirt Affected: All versions, or not specified |
| CVE-2022-0897 | 4.3 | Mar 25 | A flaw was found in the libvirt nwfilter driver Affected: through 1.1.1 |
Showing 22