CVE-2019-10161

Summary: CVE-2019-10161 affects libvirt’s libvirtd server in vulnerable releases prior to 4.10.1 and 5.4.1. The virDomainSaveImageGetXMLDesc() API could be invoked by read-only clients with access to the libvirtd socket, specifying an arbitrary path that would be accessed with the permissions of ...

CVE-2020-25637

CVE-2020-25637 affects libvirt API used to fetch network interfaces for running QEMU domains. A double-free in the polkit-enabled read-write socket handling can crash the libvirt daemon, causing denial of service and potential privilege escalation. The vulnerability affects versions before 6.8.0;...

CVE-2019-3840

CVE-2019-3840 is a NULL pointer dereference in libvirt related to qemuAgentGetInterfaces after qemuAgentCommand, allowing a guest VM attacker to crash libvirtd and cause a denial of service. Affected packages are libvirt; remediation is to update the libvirt package to a patched version as descri...

CVE-2019-20485

CVE-2019-20485 affects libvirt’s qemu_driver.c, where libvirt before version 6.0.0 mishandles holding a monitor job during a guest-agent query, enabling a denial of service (API blockage). Connected advisories corroborate the issue across multiple distributions (e.g., Astra Linux, Amazon Linux 2,...

CVE-2021-3631

CVE-2021-3631 affects libvirt: flaw in SELinux MCS category pair generation for VM dynamic labels allows a guest to access files labeled for another guest, breaking sVirt confinement and impacting confidentiality/integrity. Connected advisories confirm libvirt remediation via package upgrades (no...

CVE-2024-2496

Mode C: This CVE is active in libvirt. A NULL pointer dereference in udevConnectListAllInterfaces() can occur when detaching a host interface while listing interfaces with virConnectListAllInterfaces, potentially crashing the libvirt daemon (DoS). Connected advisories confirm affected packages an...

CVE-2021-3975

CVE-2021-3975 is a use-after-free in libvirt affecting the qemuMonitorUnregister path inside qemuProcessHandleMonitorEOF. It can be triggered by the virConnectGetAllDomainStats API during guest shutdown, allowing an unprivileged read-only client to crash the libvirt daemon and cause a denial of s...

CVE-2021-4147

CVE-2021-4147 affects the libvirt libxl driver. A malicious guest can continuously reboot, causing libvirtd on the host to deadlock or crash, leading to a denial of service. Public docs reference the libvirt/QEMU context and confirm the issue lies in the libxl driver that can trigger host-side ha...

CVE-2020-10701

CVE-2020-10701 relates to a missing authorization flaw in the libvirt API that controls the QEMU guest agent response timeout. The issue permits read-only connections to modify the timeout used for QEMU guest agent commands, potentially causing agent commands to fail if the agent cannot respond i...

CVE-2016-10746

CVE-2016-10746 affects libvirt before 1.3.1: libvirt-domain.c allows virDomainGetTime API calls by guest agents over an RO connection when an RW connection was required. Root cause is a permission/connection type mismatch enabling information disclosure or potential denial of service. Remediation...