Red Hat Libvirt vulnerabilities

73 CVEs affecting Red Hat Libvirt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8235, published 2024-08-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-2218, published 2013-09-30. Medium severity, CVSS 5.0. EPSS: 8.3% chance of exploitation in the next 30 days. Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a…
CVE-2013-0170, published 2013-02-08. Medium severity, CVSS 6.8. EPSS: 5.8% chance of exploitation in the next 30 days. Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4…
CVE-2012-4423, published 2012-11-19. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1)…
CVE-2016-5008, published 2016-07-13. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC…
CVE-2011-2511, published 2011-08-10. Medium severity, CVSS 4.0. EPSS: 3.5% chance of exploitation in the next 30 days. Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call…
CVE-2013-1962, published 2013-05-29. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number…
CVE-2018-5748, published 2018-01-25. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
CVE-2018-1064, published 2018-03-28. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
CVE-2013-4296, published 2013-09-30. Medium severity, CVSS 4.0. EPSS: 2.7% chance of exploitation in the next 30 days. The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated…
CVE-2020-10703, published 2020-06-02. Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days. A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more…

Latest

CVE-2024-8235, published 2024-08-30. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL…
CVE-2024-2496, published 2024-03-18. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of…
CVE-2023-3750, published 2023-07-24. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same…
CVE-2023-2700, published 2023-05-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the…
CVE-2021-3975, published 2022-08-23. Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days. A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock.…
CVE-2022-0897, published 2022-03-25. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no…
CVE-2021-4147, published 2022-03-25. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
CVE-2021-3667, published 2022-03-02. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not…
CVE-2021-3631, published 2022-03-02. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the…
CVE-2020-14301, published 2021-05-27. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows…