CVE-2021-21627

CVE-2021-21627 is a CSRF vulnerability in Jenkins Libvirt Agents Plugin (versions

CVE-2021-21627

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

HVM soft-reset crashes toolstack

ISSUE DESCRIPTION libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the...

CSRF vulnerability in libvirt-slave

libvirt-slave 1.9.0 and earlier does not require POST requests for a form submission endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to stop hypervisor domains. libvirt-slave 1.9.1 requires POST requests for the affected HTTP endpoint...

CVE-2021-21627: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains...

Jenkins Libvirt Agents Cross-Site Request Forgery Vulnerability

Jenkins Libvirt Agents is Jenkins open source an application plugin . The plug-in is used to add libvirt hypervisor agent support. A cross-site request forgery vulnerability exists in Jenkins Libvirt Agents Plugin 1.9.0 and earlier versions. An attacker could exploit this vulnerability to stop th...

PT-2021-14670 · Jenkins · Jenkins Libvirt Agents Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Libvirt Agents Plugin versions 1.9.0 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to stop hypervisor domains. This issue arises because the plugin does not require POST requests for a form...

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2021-1631)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2021-1666)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-22700

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: A use-after-free flaw was found in libvirt, where the qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without adequate protection by a monitor...

EulerOS Virtualization 2.9.0 : libvirt (EulerOS-SA-2021-1666)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting informati...

EulerOS Virtualization 2.9.1 : libvirt (EulerOS-SA-2021-1631)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting informati...

EulerOS Virtualization 3.0.6.6 : libvirt (EulerOS-SA-2021-1456)

According to the version of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information...

NewStart CGSL MAIN 6.02 : libvirt Vulnerability (NS-SA-2021-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has libvirt packages installed that are affected by a vulnerability: - An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetSta...

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2021-1456)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2021-1526)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : libvirt (EulerOS-SA-2021-1526)

According to the version of the libvirt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A double free memory issue was found to occur in the libvirt API responsible for requesting information about network...

virt:rhel and virt-devel:rhel security update

An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Virtuozzo Hybrid Infrastructure 4.5 (4.5.0-284)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover compute services, networking, storage core, monitoring, and the administrative user interface. Additionally,...

Oracle Linux 7 : libvirt (ELSA-2020-5961)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5961 advisory. - qemu: remove use of qemuDomainObjBeginJobWithAgent Jonathon Jongsma Orabug: 31990187 CVE-2019-20485 - qemu: dont hold monitor and agent job when setting time...