libvirt vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20195
3. 20201

Newest CVEs

• CVE-2020-10703

  A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage…

  libvirt · libvirt

  Medium6.5
• CVE-2019-10168

  The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator"…

  libvirt · libvirt

  High8.8
• CVE-2019-10167

  The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the…

  libvirt · libvirt

  High8.8
• CVE-2019-10166

  It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML()…

  libvirt · libvirt

  High7.8
• CVE-2019-10161

  It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an…

  Libvirt · libvirt

  High8.8
• CVE-2019-10132

  A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration…

  libvirt · libvirt

  High8.8
• CVE-2018-1064

  libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now…

  libvirt · libvirt

  High7.5