Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 85

Export CSV
CVE-2018-1064

libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Libvirt and 1 more
CVE-2017-2635

libvirt: Null pointer dereference when updating storage size on empty drives

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

CVSS 3.0 · 7.7 High EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Libvirt
CVE-2016-10746

libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Libvirt
CVE-2015-5160

libvirt: Ceph id/key leaked in the process list

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libvirt Redhat
Products
Libvirt Enterprise Linux Enterprise Linux Desktop and 8 more