Lucene search
K

16 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.5 views

The vulnerability of the API virStoragePoolLookupByTargetPath in the virtualization management library Libvirt allows a attacker to cause a service failure.

The vulnerability of the API virStoragePoolLookupByTargetPath in the virtualization management library Libvirt is related to insufficient blocking mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

6.5CVSS7AI score0.01334EPSS
Exploits0References9Affected Software4
OpenVAS
OpenVAS
added 2022/08/01 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2022-2213)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS6.8AI score0.01334EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:0 a.m.345 views

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-2213)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the...

8.2CVSS6.8AI score0.01334EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/07/15 12:0 a.m.54 views

EulerOS Virtualization 2.10.1 : libvirt (EulerOS-SA-2022-2073)

According to the versions of the libvirt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited...

6.5CVSS6.9AI score0.01334EPSS
Exploits1References3
Veracode
Veracode
added 2022/03/04 7:5 a.m.34 views

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service. Lack of proper handling of a locked virStoragePoolObj object to release on ACL permission failure in the function virStoragePoolLookupByTargetPath allows other users to access storage pool APIs, causing an application crash...

6.5CVSS3.4AI score0.01334EPSS
Exploits0References11Affected Software1
OSV
OSV
added 2022/03/02 11:15 p.m.30 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.5CVSS9.2AI score
Exploits0References6
NVD
NVD
added 2022/03/02 11:15 p.m.27 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.5CVSS0.01334EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2022/03/02 11:15 p.m.27 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.5CVSS6.8AI score0.01334EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/02 12:0 a.m.21 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.6AI score0.01334EPSS
Exploits0References6
CVE
CVE
added 2022/03/02 12:0 a.m.171 views

CVE-2021-3667

CVE-2021-3667 affects libvirt, in particular the virStoragePoolLookupByTargetPath API where a locked virStoragePoolObj is not released on ACL permission failure. This can let clients with limited ACLs on the read-write socket acquire the lock and cause denial of service to storage pool/volume API...

6.5CVSS6.2AI score0.01334EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2022/03/02 12:0 a.m.40 views

CVE-2021-3667

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited...

6.5CVSS6.6AI score0.01334EPSS
Exploits0
OSV
OSV
added 2021/11/05 1:6 p.m.7 views

OPENSUSE-SU-2021:1451-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. bsc1188843 This update was imported from the SUSE:SLE-15-SP2:Update update project...

6.5CVSS6.7AI score0.01334EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2021/10/30 12:0 a.m.44 views

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2021:3586-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3586-1 advisory. - An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath...

6.5CVSS7.1AI score0.01334EPSS
Exploits0References10
OSV
OSV
added 2021/10/29 2:28 p.m.6 views

SUSE-SU-2021:3586-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. bsc1188843...

6.5CVSS6.5AI score0.01334EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2021/10/05 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2021:3277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.7AI score0.01334EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2021/09/30 4:59 p.m.55 views

Moderate: Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update

An update for the virt:av and virt-devel:av modules is now available for Red Hat Enterprise Linux Advanced Virtualization 8.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

8.5CVSS6.9AI score0.02904EPSS
Exploits1References27
Rows per page
Query Builder