Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-7823
HistoryNov 13, 2014 - 9:32 p.m.

CVE-2014-7823

2014-11-1321:32:04
CWE-255
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.

Affected configurations

Nvd
Node
redhatlibvirtRange≤1.2.10
OR
redhatlibvirtMatch1.2.0
OR
redhatlibvirtMatch1.2.1
OR
redhatlibvirtMatch1.2.2
OR
redhatlibvirtMatch1.2.3
OR
redhatlibvirtMatch1.2.4
OR
redhatlibvirtMatch1.2.5
OR
redhatlibvirtMatch1.2.6
OR
redhatlibvirtMatch1.2.7
OR
redhatlibvirtMatch1.2.8
OR
redhatlibvirtMatch1.2.9

Related

openvas 13
debiancve 1
nessus 16
redhat 2
cve 1
cvelist 1
ubuntucve 1
centos 2
prion 1
oraclelinux 3
mageia 1
veracode 1
securityvulns 2
ubuntu 1
altlinux 1
fedora 2
f5 2
gentoo 1
osv 15
openvas
openvas
CentOS Update for libvirt CESA-2015:0008 centos7
2015-01-23 00:00:00
RedHat Update for libvirt RHSA-2015:0008-01
2015-01-23 00:00:00
Mageia: Security Advisory (MGASA-2014-0470)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2014-7823
2014-11-13 21:32:04
nessus
nessus
Scientific Linux Security Update : libvirt on SL7.x x86_64 (20150105)
2015-01-07 00:00:00
RHEL 7 : libvirt (RHSA-2015:0008)
2015-01-06 00:00:00
Mandriva Linux Security Advisory : libvirt (MDVSA-2014:222)
2014-11-24 00:00:00
redhat
redhat
(RHSA-2015:0008) Low: libvirt security and bug fix update
2015-01-05 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
cve
cve
CVE-2014-7823
2014-11-13 21:32:04
cvelist
cvelist
CVE-2014-7823
2014-11-13 15:00:00
ubuntucve
ubuntucve
CVE-2014-7823
2014-11-05 00:00:00
centos
centos
libvirt security update
2015-01-05 23:41:12
libvirt security update
2014-11-18 18:46:17
prion
prion
Code injection
2014-11-13 21:32:00
oraclelinux
oraclelinux
libvirt security and bug fix update
2015-01-05 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerability
2014-11-21 15:44:16
veracode
veracode
Information Disclosure
2018-08-20 06:57:32
securityvulns
securityvulns
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
libvirt information leakage
2014-11-24 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
2014-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2014-12-08 00:00:00
osv
osv
CVE-2020-25637
2020-10-06 14:15:12
CVE-2016-10746
2019-04-18 16:29:00
CVE-2021-3975
2022-08-23 20:15:08

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

8

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON
Related for NVD:CVE-2014-7823
openvas13debiancve1nessus16redhat2cve1cvelist1ubuntucve1centos2prion1oraclelinux3mageia1veracode1securityvulns2ubuntu1altlinux1fedora2f52gentoo1osv15