88 results · Feed
-
Unscored —
The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write con…
-
Unscored —
The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle fir…
-
Unscored —
Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c …
-
Unscored —
libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE fl…
-
Unscored —
The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a d…
-
Unscored —
The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return valu…
-
Unscored —
The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unl…
-
Unscored —
The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an ident…
-
Unscored —
The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using …
-
Unscored —
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged o…
-
Unscored —
The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list…
-
Unscored —
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a cr…
-
Unscored —
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbit…
-
Unscored —
The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monit…
-
Unscored —
The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host device…
-
Unscored —
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) …
-
Unscored —
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not p…
-
Unscored —
libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains …
-
Unscored —CVE-2014-1447 Public exploit
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to caus…
-
Unscored —
The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the …
-
Unscored —
virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privi…
-
Unscored —
The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission inst…
-
Unscored —
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass int…
-
Unscored —
The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to c…
-
Unscored —
The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10…
-
Unscored —
The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to…
-
Unscored —
Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows …
-
Unscored —
The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users…
-
Unscored —
libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of doma…
-
Unscored —
The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid…
-
Unscored —CVE-2013-2218 Public exploit
Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1…
-
Unscored —
The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of ser…
-
Unscored —
The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a d…
-
Unscored —
libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these file…
-
Unscored —
Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.…
-
Unscored —
The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of serv…
-
Unscored —
The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed par…
-
Unscored —
libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have th…
-
Unscored —
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash…
-
Unscored —
The virSecurityManagerGetPrivateData function in security/security_manager.c in libvirt 0.8.8 through 0.9.1 uses the wr…