EUVD-2011-4524

Malware in sbrugna...

EUVD-2013-7109

Malware in sbrugna...

EUVD-2011-2170

Malware in sbrugna...

Unity Linux 20.1070e Security Update: libvirt (UTSA-2025-680656)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680656 advisory. A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for...

NewStart CGSL MAIN 6.06 : libvirt Vulnerability (NS-SA-2025-0225)

The remote NewStart CGSL host, running version MAIN 6.06, has libvirt packages installed that are affected by a vulnerability: - An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetSta...

Azure Linux 3.0 Security Update: libvirt (CVE-2024-1441)

The version of libvirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1441 advisory. - An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of...

Azure Linux 3.0 Security Update: libvirt (CVE-2024-2494)

The version of libvirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2494 advisory. - A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory fo...

Azure Linux 3.0 Security Update: libvirt (CVE-2024-4418)

The version of libvirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4418 advisory. - A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the...

CVE-2024-1441 affecting package libvirt for versions less than 10.0.0-4

CVE-2024-1441 affecting package libvirt for versions less than 10.0.0-4. A patched version of the package is available...

CVE-2024-2494 affecting package libvirt for versions less than 10.0.0-4

CVE-2024-2494 affecting package libvirt for versions less than 10.0.0-4. A patched version of the package is available...

RHEL 9 : libvirt (RHSA-2024:9128)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9128 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains...

NULL Pointer Dereference

libvirt is vulnerable to a NULL Pointer Dereference. The vulnerability is due to a corner case in the code fetching the list of interfaces where allocating 0 bytes of memory results in a NULL pointer, leading to a crash of the virtinterfaced daemon...

PT-2024-4010

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop method, the data pointer to a stack-allocated...

ROS-20240423-11

A vulnerability in the Libvirt virtualization management daemon is related to memory re-release. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service. integrity, and cause a denial of service...

USN-6734-1 libvirt vulnerabilities

Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2024-1441 It was discovered that libvirt incorrectly handled certain RPC library API calls. An attacker cou...

The vulnerability of the udevListInterfacesByStatus() function in the libvirt library, which allows a hacker to trigger a service failure

The vulnerability of the udevListInterfacesByStatus function in the src/interface/interfacebackendudev.c module of the libvirt library is related to an off-by-one error. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the Libvirt virtualization management library, related to the incorrect assignment of permissions to critical resources, allows a hacker to gain access to confidential information.

The vulnerability of the Libvirt virtualization management library is related to the creation of SELinux MCS category pairs for dynamic virtual machine tags. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

AZL-37110 CVE-2024-2494 affecting package libvirt for versions less than 7.10.0-9

A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the gnew0 function results in a crash due to the negative length being...

PT-2024-2717

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description The issue is related to an off-by-one error flaw in the udevListInterfacesByStatus function in libvirt. This flaw occurs when the number of interfaces exceeds the size of the names array. An...

CentOS 9 : libvirt-9.5.0-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libvirt-9.5.0-5.el9 build changelog. - A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and...