CVE-2023-2700

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

CVE-2023-2700

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

CVE-2023-2700: Missing Release of Memory after Effective Lifetime

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

virt:kvm_utils security update

hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt 5.7.0-40 - build: change dependency to allow post install erasing of /usr/bin/nc Wim ten Have Orabug: 35289777 - util: Make virFileClose quiet on success Andrea Bolognani Orabug: 35090886 5.7.0-39 - exadata: update maxvcpus for vNUMA...

Red Hat libvirt security vulnerabilities

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt that stems...

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2023-1687)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : libvirt (EulerOS-SA-2023-1687)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using...

libvirt bug fix and enhancement update

An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

Rocky Linux and virt-devel:Rocky Linux bug fix update

An update is available for sgabios, module.hivex, module.libvirt, module.virt-v2v, hivex, perl-Sys-Virt, module.libguestfs, module.nbdkit, netcf, swtpm, module.qemu-kvm, module.seabios, module.libvirt-python, virt-v2v, libtpms, module.supermin, libvirt-dbus, qemu-kvm, supermin, module.libvirt-dbu...

CBL Mariner 2.0 Security Update: libvirt (CVE-2020-10701)

The version of libvirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-10701 advisory. - A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response...

com.nirima:docker-plugin (>=0.3.4, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.557) +9 more potentially affected by CVE-2023-27900 via org.jenkins-ci.main:jenkins-core (1.557)

org.jenkins-ci.main:jenkins-core MAVEN version 1.557 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.3.4, =1.8.3, =1.2, =1.0, =0.4.5, =0.4.6 Source cves: CVE-2023-27900...

com.nirima:docker-plugin (>=0.3.4, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.557) +9 more potentially affected by CVE-2023-27904 via org.jenkins-ci.main:jenkins-core (1.557)

org.jenkins-ci.main:jenkins-core MAVEN version 1.557 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima:docker-plugin =0.3.4, =1.8.3, =1.2, =1.0, =0.4.5, =0.4.6 Source cves: CVE-2023-27904...

Debian: Security Advisory (DLA-541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

qemu-kvm bug fix update

An update is available for qemu-kvm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM is a full virtualization solution for Linux...

Rocky Linux and virt-devel:Rocky Linux bug fix and enhancement update

An update is available for sgabios, module.hivex, module.libvirt, module.virt-v2v, hivex, perl-Sys-Virt, module.libguestfs, module.nbdkit, netcf, swtpm, module.qemu-kvm, module.seabios, module.libvirt-python, virt-v2v, libtpms, module.supermin, libvirt-dbus, qemu-kvm, supermin, module.libvirt-dbu...

K17218: Libvirt vulnerability CVE-2014-8135

Security Advisory Description The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload"...

SUSE CVE-2008-5086

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...

SUSE CVE-2009-0036

Buffer overflow in the proxyReadClientSocket function in proxy/libvirtproxy.c in libvirtproxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to...

SUSE CVE-2010-2237

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

SUSE CVE-2010-2239

Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the host OS via unspecified vectors...