CVE-2019-10132: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.

Affected products

• Fedoraproject Fedora: affected versions not specified
• Red Hat Libvirt: up to and including 4.1.0

Published 2019-05-22. Last modified 2026-06-17.