CVE-2016-10746: Debian Linux

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.

Affected products

• Debian Debian Linux: version 8.0 only
• Red Hat Libvirt: before 1.3.1 (fixed in 1.3.1)

Published 2019-04-18. Last modified 2026-06-17.