Search for packages
| purl | pkg:deb/debian/libvirt@9.0.0-4%2Bdeb12u2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ubdh-hdtv-akgt
Aliases: CVE-2025-12748 |
libvirt: Denial of service in XML parsing |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2qrr-11jk-z3a7 | libvirt: nodedev-list command may cause libvirt to crash on hosts with GRID driver installed |
CVE-2021-3559
|
| VCID-2ska-hmbg-kqdw | Multiple vulnerabilities have been discovered in libvirt, the worst of which could lead to a denial of service. |
CVE-2024-2494
|
| VCID-3w18-95nq-5ubx | Multiple vulnerabilities were found in libvirt, the worst of which might allow guest OS users to read arbitrary files on the host OS. |
CVE-2011-2511
|
| VCID-3xk5-72kc-5uhu | security update |
CVE-2018-1064
|
| VCID-3zke-md7v-6be5 | libvirt: Null pointer dereference when updating storage size on empty drives |
CVE-2017-2635
|
| VCID-425h-bz55-yfad | libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function |
CVE-2019-3840
|
| VCID-46dt-sp3g-qyf1 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-4401
|
| VCID-46j7-ce8y-jyay | libvirt: ignoring defined disk backing store format when recursing into disk image backing stores |
CVE-2010-2238
|
| VCID-4gha-yszs-x3hw | Libvirt is vulnerable to directory traversal when using Access Control Lists (ACL). |
CVE-2015-5313
|
| VCID-4kk3-gbve-ykgt | several |
CVE-2014-1447
|
| VCID-4myf-kv7v-4bfw | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-7336
|
| VCID-4wgx-cyja-4bbx | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-6436
|
| VCID-5a7s-trej-63cj | libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent |
CVE-2019-20485
|
| VCID-5pky-1svz-nqf6 | libvirt: guest agent timeout can be set under read-only mode leading to DoS |
CVE-2020-10701
|
| VCID-5ub6-8d2s-53hj | libvirt: Potential denial of service via active pool without target path |
CVE-2020-10703
|
| VCID-5wmb-1zue-tfh8 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to cause Denial of Service. |
CVE-2014-8131
|
| VCID-6a1z-xemq-43cq | libvirt: memory corruption in xenDaemonListDefinedDomains function |
CVE-2013-4239
|
| VCID-6j14-6esu-sqcp | libvirt: supplementary groups not adjusted correctly when parsing label |
CVE-2013-4291
|
| VCID-718w-xw7m-zyhm | libvirt: libvirt_proxy buffer overflow |
CVE-2009-0036
|
| VCID-7cqr-8mu4-bqba | libvirt: not setting user defined backing store format when creating new image |
CVE-2010-2239
|
| VCID-8bmv-jut6-mfdc | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-4292
|
| VCID-8bqx-15w5-4kdm | security update |
CVE-2016-5008
|
| VCID-8n5x-5hfu-t3h5 | libvirt: ignoring defined main disk format when looking up disk backing stores |
CVE-2010-2237
|
| VCID-92zx-d4rq-yka1 | libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host |
CVE-2010-2242
|
| VCID-9xr2-bm1e-3bge | libvirt: kvm-group writable storage |
CVE-2013-1766
|
| VCID-a5ed-jnjb-pybr | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2019-10168
|
| VCID-b489-x5z3-pkfh | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2019-10166
|
| VCID-brry-h5uf-sffk | Multiple vulnerabilities were found in libvirt, the worst of which might allow guest OS users to read arbitrary files on the host OS. |
CVE-2011-2178
|
| VCID-bsjb-frkp-b3an | libvirt: deadlock and crash in libxl driver |
CVE-2021-4147
|
| VCID-bvhf-srz3-7fa5 | Multiple vulnerabilities were found in libvirt, the worst of which might allow guest OS users to read arbitrary files on the host OS. |
CVE-2011-1486
|
| VCID-bz31-74av-9kgf | security update |
CVE-2014-0179
|
| VCID-c628-5r9h-37ad | libvirt: memory leak in domstats may allow read-only user to perform DoS attack |
CVE-2020-12430
|
| VCID-cfgr-2prz-mkh3 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-6456
|
| VCID-cfv9-s42e-3fdq | libvirt: unintended firewall port exposure after restarting libvirtd when defining a bridged forward-mode network |
CVE-2011-4600
|
| VCID-cma6-wset-7uaf | Multiple vulnerabilities were found in libvirt, the worst of which might allow guest OS users to read arbitrary files on the host OS. |
CVE-2011-1146
|
| VCID-cue5-u48q-87ft | Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service. |
CVE-2021-3667
|
| VCID-d2tk-fnzu-muhf | Multiple vulnerabilities have been found in libvirt, allowing remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2013-1962
|
| VCID-e4vr-p8vg-y3bn | libvirt: multiple registered events crash |
CVE-2013-2230
|
| VCID-e93r-zft5-33dk | libvirt: virsh domhostname command discloses guest hostname in readonly mode |
CVE-2019-3886
|
| VCID-efnj-ea3r-uyb2 | A race condition in polkit could allow a local attacker to gain escalated privileges. |
CVE-2013-4311
|
| VCID-f42m-zfwv-vqe5 | libvirt: stack use-after-free in virNetClientIOEventLoop() |
CVE-2024-4418
|
| VCID-fk4t-hh7x-77he | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-6457
|
| VCID-g9e9-hz2r-3uah | libvirt: incorrect permissions on the UNIX domain socket allows local attacker to escalate privileges |
CVE-2020-15708
|
| VCID-gc5z-hy4a-8uft | libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter |
CVE-2019-10132
|
| VCID-gmyn-vg39-q3bv | Multiple vulnerabilities have been found in libvirt, allowing remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2013-0170
|
| VCID-gp93-s21f-8fh7 | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2019-10161
|
| VCID-gqm9-twrh-tbcn | libvirt: Crash of virtinterfaced via virConnectListInterfaces() |
CVE-2024-8235
|
| VCID-grvk-64s2-mbdc | libvirt: double free of returned JSON array in qemuAgentGetVCPUs() |
CVE-2013-4153
|
| VCID-hpgc-t8mr-qkan | libvirt: Ceph id/key leaked in the process list |
CVE-2015-5160
|
| VCID-jcqj-y7ve-dkf3 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2014-5177
|
| VCID-ju7x-j33y-8khv | Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service. |
CVE-2020-25637
|
| VCID-k218-u33j-hkbt | Multiple vulnerabilities have been discovered in libvirt, the worst of which could lead to a denial of service. |
CVE-2023-3750
|
| VCID-kwfx-bbqy-1kdv | libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects |
CVE-2015-0236
|
| VCID-mutw-29j1-3ygb | libvirt: missing checks for read-only connection |
CVE-2008-5086
|
| VCID-mxuh-upfq-sycs | libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored |
CVE-2012-2693
|
| VCID-nfem-925f-bfdw | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2019-10167
|
| VCID-nfg5-ubxa-uqad | libvirt: Information disclosure via world-readable VM snapshots |
CVE-2025-13193
|
| VCID-nqd8-35a9-7bc5 | libvirt: off-by-one error in udevListInterfacesByStatus() |
CVE-2024-1441
|
| VCID-nyuf-8nvx-8uc2 | libvirt: leak of sensitive cookie information via dumpxml |
CVE-2020-14301
|
| VCID-p5zb-sdha-b7bu | libvirt: domain_conf: domain deadlock DoS |
CVE-2014-3657
|
| VCID-pqce-1qud-kbef | libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection |
CVE-2016-10746
|
| VCID-pr8b-xk2q-hfdg | libvirt: null function pointer invocation in virNetServerProgramDispatchCall() |
CVE-2012-4423
|
| VCID-pw95-vhme-ufdr | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to cause Denial of Service. |
CVE-2014-8136
|
| VCID-pyrh-w789-8fbb | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-5651
|
| VCID-q2ed-rmxa-m3hq | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-4297
|
| VCID-r65y-py21-u3eu | libvirt: segmentation fault during VM shutdown can lead to vdsm hang |
CVE-2021-3975
|
| VCID-r6kr-1kw6-abet | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-4400
|
| VCID-re7g-2nvj-j3dp | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2018-5748
|
| VCID-rrbw-31ka-5fca | Multiple vulnerabilities have been discovered in libvirt, the worst of which could lead to a denial of service. |
CVE-2023-2700
|
| VCID-smdn-m8vh-9bb8 | libvirt: denial of service when volume creation fails on NFS pool |
CVE-2015-5247
|
| VCID-ttae-7135-n7ff | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2013-4399
|
| VCID-ty73-ba9j-cyea | libvirt: crash of libvirtd without guest agent configuration |
CVE-2013-4154
|
| VCID-unyh-d92r-8udp | security update |
CVE-2014-3633
|
| VCID-ure4-cjpz-r3b5 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2014-7823
|
| VCID-vmnc-v6zq-dkhv | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to cause Denial of Service. |
CVE-2014-8135
|
| VCID-vwry-7s56-v7e8 | libvirt: crash in virTypedParameterArrayClear |
CVE-2012-3445
|
| VCID-wf9y-4uwu-gkaz | A vulnerability in libvirt may allow root privilege escalation. |
CVE-2020-14339
|
| VCID-whhu-jy51-qkec | security update |
CVE-2017-1000256
|
| VCID-wkrz-dcvc-5ugc | libvirt: NULL pointer dereference in udevConnectListAllInterfaces() |
CVE-2024-2496
|
| VCID-x76t-fcgm-3yf3 | programming error |
CVE-2013-4296
|
| VCID-xkwg-y7f7-pfac | libvirt: virConnectListAllInterfaces crash |
CVE-2013-2218
|
| VCID-xp7b-461n-a3d2 | several |
CVE-2013-6458
|
| VCID-ypmp-rsaw-s3hb | Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service. |
CVE-2022-0897
|
| VCID-yvkr-qhaj-bfcx | Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. |
CVE-2018-6764
|
| VCID-zd79-93nb-pye7 | Multiple vulnerabilities have been found in libvirt, worst of which allows context-dependent attackers to escalate privileges. |
CVE-2014-0028
|
| VCID-zj24-rwt5-g3dg | Multiple vulnerabilities have been discovered in libvirt, the worst of which could result in denial of service. |
CVE-2021-3631
|