LI
Vendor
Libvirt
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2015-5160 | LI Libvirt Libvirt | 5.5 | Aug 20 | libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a… |
| CVE-2014-3657 | LI Libvirt Libvirt | – | Oct 6 | The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial… |
| CVE-2014-3633 | LI Libvirt Libvirt | – | Oct 6 | The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to… |
| CVE-2010-2242 | LI Libvirt Libvirt | – | Aug 19 | Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by… |
| CVE-2010-2239 | LI Libvirt Libvirt | – | Aug 19 | Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the… |
| CVE-2010-2238 | LI Libvirt Libvirt | – | Aug 19 | Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users… |
| CVE-2010-2237 | LI Libvirt Libvirt | – | Aug 19 | Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read… |
| CVE-2009-0036 | LI Libvirt Libvirt | – | Feb 11 | Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header… |
| CVE-2008-5086 | LI Libvirt Libvirt | – | Dec 19 | Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform… |