Denial Of Service (DoS)

libvirt is vulnerable to denial of service. When parsing XML documents using the libxml2 library, libvirt passes the XMLPARSENOENT flag and all XML entities in the parsed documents are expanded. This allows an attacker to parse an XML document which references a special file that blocks read acce...

Authorization Bypass

libvirt is vulnerable to authorization bypass attacks. The vulnerability exists as the networkReloadIptablesRules function of network/bridgedriver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to...

Fedora 28 : libvirt (2018-527698a904) (Spectre)

Add new CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl...

PT-2018-19322

Уязвимость пакета управления виртуализацией libvirt операционной системы Astra Linux связана с некорректным назначением мандатных меток на внешние файловые хранилища с включенным режимом мандатного контроля целостности МКЦ. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

Amazon Linux 2 : libvirt (ALAS-2018-1134)

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.CVE-2018-6764 C Tenable Network Security, Inc. The descriptive...

Medium: libvirt

Issue Overview: util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.CVE-2018-6764 Affected Packages: libvirt Note:...

Libvirt Memory Exhaustion DoS

The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CentOS 7 : libvirt (CESA-2018:3113)

An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

libvirt security update

CentOS Errata and Security Advisory CESA-2018:3113 An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : libvirt on SL7.x x86_64 (20181030)

Security Fixes : - libvirt: guest could inject executable code via libnssdns.so loaded by libvirtlxc before init CVE-2018-6764 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid119193; scriptversion"1.5";...

USN-3826-1: QEMU vulnerabilities

Daniel Shapira and Arash Tohidi discovered that QEMU incorrectly handled NE2000 device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2018-10839 It was discovered that QEMU incorrectly handled the Slirp networking back-en...

Oracle Linux 7 : libvirt (ELSA-2018-3113)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-3113 advisory. 4.5.0-10 - conf: correct false boot order error during domain parse rhbz1601318 4.5.0-9 - virDomainDefCompatibleDevice: Relax alias change check rhbz1621910 -...

libvirt security, bug fix, and enhancement update

4.5.0-10 - conf: correct false boot order error during domain parse rhbz1601318 4.5.0-9 - virDomainDefCompatibleDevice: Relax alias change check rhbz1621910 - virDomainDetachDeviceFlags: Clarify update semantics rhbz1621910 - virDomainNetDefCheckABIStability: Check for MTU change too rhbz1623157...

RHEL 7 : libvirt (RHSA-2018:3113)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3113 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 6 : libvirt (RHSA-2018:3399) (Spectre)

An update for libvirt is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 6 : libvirt (RHSA-2018:3400)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3400 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 6 : libvirt (RHSA-2018:3396)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3396 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 7 : libvirt (RHSA-2018:3398)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3398 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 6 : libvirt (RHSA-2018:3402)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3402 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 7 : libvirt (RHSA-2018:3407)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3407 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...