Skip to content
OpenAdvisories
Unscored RHSA-2009:0382 2 CVEs

Red Hat Security Advisory: libvirt security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client libvirt 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client libvirt-debuginfo 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client libvirt-devel 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client libvirt-python 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server libvirt 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server libvirt-debuginfo 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server libvirt-devel 0:0.3.3-14.el5_3.1
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server libvirt-python 0:0.3.3-14.el5_3.1

Vulnerabilities 2

  • Unscored —
    CVE-2008-5086

    Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to …

    libvirt Debian
  • Unscored —
    CVE-2009-0036 Public exploit

    Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local…

    libvirt Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=476560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=484947
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0382.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5086
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5086
  • report
    https://access.redhat.com/security/cve/CVE-2009-0036
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0036
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0036