CVE-2020-14339

CVE-2020-14339 describes a flaw in libvirt where a file descriptor for /dev/mapper/control is leaked into the QEMU process. This enables privileged operations against the host device-mapper, allowing a malicious guest user or process to perform actions outside normal permissions and potentially d...

CVE-2020-14301

CVE-2020-14301 is an information-disclosure in libvirt prior to 6.3.0 where HTTP cookies used to access network-based disks were saved in a guest domain’s dumpxml XML, enabling access to sensitive domain configuration data. Affected: libvirt