Libvirt Security Vulnerabilities and Issues — Libvirt CVE List

Lucene search

LibvirtLibvirt

3 matches found

CVE•added 2018/08/20 9:29 p.m.•93 views

CVE-2015-5160

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

5.5CVSS5.8AI score0.00145EPSS

CVE•added 2014/10/06 2:55 p.m.•72 views

CVE-2014-3633

The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-...

5.8CVSS8AI score0.03629EPSS

CVE•added 2014/10/06 2:55 p.m.•70 views

CVE-2014-3657

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

5CVSS7.9AI score0.01497EPSS