[SECURITY] Fedora 10 Update: libvirt-0.5.1-2.fc10

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes...

[SECURITY] Fedora 9 Update: libvirt-0.5.1-2.fc9

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes...

Fedora 9 : libvirt-0.5.1-2.fc9 (2008-11433)

fix missing read-only access checks, fixes CVE-2008-5086 - upstream release 0.5.1 - mostly bugfixes e.g 473071 - some driver improvements Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

libvirt privilege escalation

Potentially dangeroues operations are not marked as read only...

[USN-694-1] libvirt vulnerability

=========================================================== Ubuntu Security Notice USN-694-1 December 18, 2008 libvirt vulnerability CVE-2008-5086 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS Ubuntu...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

DEBIAN-CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

Code injection

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

CVE-2008-5086

CVE-2008-5086 affects libvirt 0.3.2–0.5.1. The issue arises because several methods do not verify whether a connection is read-only, allowing a local attacker to bypass intended access restrictions and execute administrative actions. The MiracleLinux/Nessus entries link this CVE to libvirt in old...

CVE-2008-5086: Undefined Security Weakness

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

USN-694-1: libvirt vulnerability

It was discovered that libvirt did not mark certain operations as read-only. A local attacker may be able to perform privileged actions such as migrating virtual machines, adjusting autostart flags, or accessing privileged data in the virtual machine memory and disks...

Design/Logic Flaw

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...

CVE-2008-4405

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to 1...

PT-2012-6367 · Opensuse +3 · Libvirt +3

Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 0.10.2 Description: The issue affects the libvirt package in the openSUSE operating system, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can...