Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1152-1
HistoryJun 16, 2011 - 12:00 a.m.

libvirt vulnerabilities

2011-06-1600:00:00
ubuntu.com
37

7.5 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

0.022 Low

EPSS

Percentile

89.4%

JSON

Releases

  • Ubuntu 11.04
  • Ubuntu 10.10
  • Ubuntu 10.04

Packages

  • libvirt - Libvirt virtualization toolkit

Details

It was discovered that libvirt did not use thread-safe error reporting. A
remote attacker could exploit this to cause a denial of service via
application crash. (CVE-2011-1486)

Eric Blake discovered that libvirt had an off-by-one error which could
be used to reopen disk probing and bypass the fix for CVE-2010-2238. A
privileged attacker in the guest could exploit this to read arbitrary files
on the host. This issue only affected Ubuntu 11.04. By default, guests are
confined by an AppArmor profile which provided partial protection against
this flaw. (CVE-2011-2178)

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchlibvirt0< 0.8.8-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchlibvirt-bin< 0.8.8-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchlibvirt-dev< 0.8.8-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchlibvirt0-dbg< 0.8.8-1ubuntu6.2UNKNOWN
Ubuntu11.04noarchpython-libvirt< 0.8.8-1ubuntu6.2UNKNOWN
Ubuntu10.10noarchlibvirt0< 0.8.3-1ubuntu18UNKNOWN
Ubuntu10.10noarchlibvirt-bin< 0.8.3-1ubuntu18UNKNOWN
Ubuntu10.10noarchlibvirt-dev< 0.8.3-1ubuntu18UNKNOWN
Ubuntu10.10noarchlibvirt0-dbg< 0.8.3-1ubuntu18UNKNOWN
Ubuntu10.10noarchpython-libvirt< 0.8.3-1ubuntu18UNKNOWN
Rows per page:
1-10 of 151

Related

openvas 34
securityvulns 5
nessus 29
debiancve 3
cve 3
ubuntucve 3
prion 3
gentoo 1
cvelist 3
redhat 2
veracode 1
centos 1
oraclelinux 2
fedora 7
debian 2
osv 17
ubuntu 4
openvas
openvas
Ubuntu: Security Advisory (USN-1152-1)
2011-06-20 00:00:00
Ubuntu Update for libvirt USN-1152-1
2011-06-20 00:00:00
Gentoo Security Advisory GLSA 201202-07 (libvirt)
2012-03-12 00:00:00
securityvulns
securityvulns
[USN-1152-1] libvirt vulnerabilities
2011-06-19 00:00:00
libvirt security vulnerabilities
2011-06-19 00:00:00
[SECURITY] [DSA 2280-1] libvirt security update
2011-07-22 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 / 11.04 : libvirt vulnerabilities (USN-1152-1)
2011-06-17 00:00:00
GLSA-201202-07 : libvirt: Multiple vulnerabilities
2012-02-28 00:00:00
Oracle Linux 6 : libvirt (ELSA-2011-0479)
2013-07-12 00:00:00
debiancve
debiancve
CVE-2011-2178
2011-08-10 20:55:00
CVE-2010-2238
2010-08-19 18:00:00
CVE-2011-1486
2011-05-31 20:55:00
cve
cve
CVE-2011-2178
2011-08-10 20:55:00
CVE-2010-2238
2010-08-19 18:00:00
CVE-2011-1486
2011-05-31 20:55:00
ubuntucve
ubuntucve
CVE-2011-2178
2011-06-10 00:00:00
CVE-2010-2238
2010-08-19 00:00:00
CVE-2011-1486
2011-05-31 00:00:00
prion
prion
Design/Logic Flaw
2011-08-10 20:55:00
Design/Logic Flaw
2010-08-19 18:00:00
Code injection
2011-05-31 20:55:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2012-02-27 00:00:00
cvelist
cvelist
CVE-2010-2238
2010-08-19 17:43:00
CVE-2011-1486
2011-05-31 20:00:00
CVE-2011-2178
2011-08-10 20:00:00
redhat
redhat
(RHSA-2011:0478) Moderate: libvirt security update
2011-05-02 00:00:00
(RHSA-2011:0479) Moderate: libvirt security and bug fix update
2011-05-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:56:35
centos
centos
libvirt security update
2011-05-04 12:38:33
oraclelinux
oraclelinux
libvirt security and bug fix update
2011-05-02 00:00:00
libvirt security update
2011-05-02 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: libvirt-0.8.8-4.fc15
2011-04-15 21:28:20
[SECURITY] Fedora 13 Update: libvirt-0.8.2-6.fc13
2011-04-18 21:23:20
[SECURITY] Fedora 14 Update: libvirt-0.8.3-9.fc14
2011-04-11 21:00:16
debian
debian
[BSA-052] Security Update for libvirt
2011-11-11 11:47:13
[SECURITY] [DSA 2280-1] libvirt security update
2011-07-19 09:45:09
osv
osv
libvirt - several
2011-07-19 00:00:00
CVE-2022-0897
2022-03-25 19:15:10
CVE-2020-12430
2020-04-28 20:15:12
ubuntu
ubuntu
Virtinst update
2010-10-21 00:00:00
libvirt vulnerabilities
2010-10-21 00:00:00
libvirt regression
2010-11-08 00:00:00

7.5 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:S/C:C/I:N/A:N

0.022 Low

EPSS

Percentile

89.4%

JSON
Related for USN-1152-1
openvas34securityvulns5nessus29debiancve3cve3ubuntucve3prion3gentoo1cvelist3redhat2veracode1centos1oraclelinux2fedora7debian2osv17ubuntu4