4504 matches found
SUSE-SU-2021:2812-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 - CVE-2021-3667: Unlock object on ACL fail in storagePoolLookupByTargetPath bsc1188843 Non-security issues fixed: - virtlockd: Don't report error if lockspace...
Red Hat libvirt security vulnerabilities
Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt. No furthe...
Security update for libvirt (moderate)
openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2021:2812-1 Rating: moderate References: 1184253 1187871 1188232 1188843 Cross-References: CVE-2021-3631 CVE-2021-3667 CVSS scores: CVE-2021-3631 SUSE: 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-3667...
libvirt Pointer Dereferencing DoS
The vulnerability of the daemon and the set of tools for managing virtualization via Libvirt are related to an error in the storage pool selection based on its target path. Exploiting this vulnerability allows a remote attacker to trigger a service failure...
MGASA-2021-0399 Updated libvirt packages fix security vulnerability
Updated libvirt packages fix security vulnerability: insecure sVirt label generation CVE-2021-3631...
Updated libvirt packages fix security vulnerability
Updated libvirt packages fix security vulnerability: insecure sVirt label generation CVE-2021-3631...
openSUSE 15 Security Update : libvirt (openSUSE-SU-2021:1119-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1119-1 advisory. - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access...
openSUSE: Security Advisory for libvirt (openSUSE-SU-2021:1119-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
virt:rhel and virt-devel:rhel security and bug fix update
An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...
OPENSUSE-SU-2021:1119-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for libvirt (moderate)
openSUSE Security Update: Security update for libvirt Announcement ID: openSUSE-SU-2021:1119-1 Rating: moderate References: 1184253 1187871 Cross-References: CVE-2021-3631 CVSS scores: CVE-2021-3631 SUSE: 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.2 An...
PT-2021-7380 · Libvirt +10 · Libvirt +10
Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object i...
SUSE: Security Advisory (SUSE-SU-2021:2471-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3667
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...
SUSE-SU-2021:2471-1 Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2021-3631: fix SELinux label generation logic bsc1187871...
PT-2022-7295
Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description The issue is related to the generation of SELinux MCS category pairs for dynamic labels of virtual machines in the libvirt library. This flaw can be exploited by a remote attacker to gain...
SUSE SLED15: libvirt / libvirt-admin / libvirt-bash-completion / libvirt-client / etc (SUSE-SU-2021:2471-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2471-1 advisory. - CVE-2021-3631: fix SELinux label generation logic bsc1187871 Tenable has extracted the preceding description block directly from the SUSE...
demon Libvirt Memory Leak DoS
The vulnerability of the demon for controlling Libvirt virtualization relates to the repeated release of memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
USN-5010-1: QEMU vulnerabilities
Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2020-15469 Wenxiang Qian discovered that QEMU incorrectly handled certain ATAPI commands. An attacker...
Fedora: Security Advisory for libvirt (FEDORA-2021-bc6ad65da0)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...