Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-7823
HistoryNov 05, 2014 - 12:00 a.m.

CVE-2014-7823

2014-11-0500:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.7%

JSON

The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote
read-only users to obtain the VNC password by using the
VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the
VIR_DOMAIN_XML_SECURE flag.

Bugs

Notes

Author Note
mdeslaur introduced by http://libvirt.org/git/?p=libvirt.git;a=commit;h=28f8dfdcccd4c0f69063ef741545b37d8a7f7935
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlibvirt< 1.2.2-0ubuntu13.1.7UNKNOWN
ubuntu14.10noarchlibvirt< 1.2.8-0ubuntu11.1UNKNOWN

Related

openvas 13
nessus 16
cvelist 1
debiancve 1
redhat 2
cve 1
prion 1
oraclelinux 3
veracode 1
centos 2
mageia 1
securityvulns 2
ubuntu 1
altlinux 1
fedora 2
f5 2
gentoo 1
osv 15
openvas
openvas
CentOS Update for libvirt CESA-2015:0008 centos7
2015-01-23 00:00:00
Mageia: Security Advisory (MGASA-2014-0470)
2022-01-28 00:00:00
RedHat Update for libvirt RHSA-2015:0008-01
2015-01-23 00:00:00
nessus
nessus
Oracle Linux 7 : libvirt (ELSA-2015-0008)
2015-01-06 00:00:00
CentOS 7 : libvirt (CESA-2015:0008)
2015-01-06 00:00:00
RHEL 7 : libvirt (RHSA-2015:0008)
2015-01-06 00:00:00
cvelist
cvelist
CVE-2014-7823
2014-11-13 15:00:00
debiancve
debiancve
CVE-2014-7823
2014-11-13 21:32:00
redhat
redhat
(RHSA-2015:0008) Low: libvirt security and bug fix update
2015-01-05 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
cve
cve
CVE-2014-7823
2014-11-13 21:32:00
prion
prion
Code injection
2014-11-13 21:32:00
oraclelinux
oraclelinux
libvirt security and bug fix update
2015-01-05 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
veracode
veracode
Information Disclosure
2018-08-20 06:57:32
centos
centos
libvirt security update
2015-01-05 23:41:12
libvirt security update
2014-11-18 18:46:17
mageia
mageia
Updated libvirt packages fix security vulnerability
2014-11-21 15:44:16
securityvulns
securityvulns
libvirt information leakage
2014-11-24 00:00:00
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
2014-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2014-12-08 00:00:00
osv
osv
CVE-2020-12430
2020-04-28 20:15:12
CVE-2020-10701
2021-05-27 19:15:07
CVE-2018-6764
2018-02-23 17:29:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

77.7%

JSON
Related for UB:CVE-2014-7823
openvas13nessus16cvelist1debiancve1redhat2cve1prion1oraclelinux3veracode1centos2mageia1securityvulns2ubuntu1altlinux1fedora2f52gentoo1osv15