CVE-2023-3750

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to...

PT-2023-8982 · Libvirt +6 · Libvirt +6

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: A flaw was found in the virStoragePoolObjListSearch function of libvirt, which does not return a locked pool as expected. This results in a race condition and denial of service when...

Red Hat libvirt 安全漏洞

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. that supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt that ste...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2023-3822)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3822 advisory. - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2101280 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,...

SUSE: Security Advisory (SUSE-SU-2023:2754-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libvirt / libvirt-admin / libvirt-bash-completion / libvirt-client / etc (SUSE-SU-2023:2754-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2754-1 advisory. - CVE-2022-0897: Fixed crash when counting number of network filters bsc1197636. Bug fixes: - qemu: Fixed potential crash during driver...

SUSE-SU-2023:2754-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2022-0897: Fixed crash when counting number of network filters bsc1197636. Bug fixes: - qemu: Fixed potential crash during driver cleanup bsc1209861. - libxl: Marked auto-allocated graphics ports to used on reconnect. - libxl: Released all...

AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2023:3822)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3822 advisory. libvirt: Memory leak in virPCIVirtualFunctionList cleanup CVE-2023-2700 Tenable has extracted the preceding description block directly from the AlmaLinux security...

SUSE SLED15: libvirt / libvirt-client / libvirt-client-qemu / libvirt-daemon / etc (SUSE-SU-2023:2652-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2652-1 advisory. - CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList bsc1211390 - apparmor: Add support for...

libvirt: Memory leak in virPCIVirtualFunctionList cleanup

A vulnerability was found in libvirt. This security flaw occurs due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE-SU-2023:2652-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList bsc1211390 - apparmor: Add support for local profile customizations bsc1211472 - qemu: Fix cdrom media change bsc1210666 - qemu: Fix potential crash during driver cleanup bsc1209...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2023:3822)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3822 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packag...

ALSA-2023:3822 Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2023:3822)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3822 advisory. - A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak...

AlmaLinux 9 : libvirt (ALSA-2023:3715)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3715 advisory. - A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused...

libvirt security update

9.0.0-10.2.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 9.0.0-10.2.el92 - virpci: Resolve leak in virPCIVirtualFunctionList cleanup CVE-2023-2700, rhbz2208596...

Oracle Linux 9 : libvirt (ELSA-2023-3715)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3715 advisory. 9.0.0-10.2.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 9.0.0-10.2.el92 - virpci: Resolve leak in virPCIVirtualFunctionList cleanup CVE-2023-2700,...

RHEL 9 : libvirt (RHSA-2023:3715)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3715 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...