CVE Browser

libvirt: Potential denial of service via active pool without target path

libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs

libvirt: arbitrary command execution via virConnectGetDomainCapabilities API

libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients

libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API

libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter

libvirt: virsh domhostname command discloses guest hostname in readonly mode

libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function

libvirt: Null pointer dereference when updating storage size on empty drives

libvirt: Ceph id/key leaked in the process list

libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent

libvirt: domain_conf: domain deadlock DoS

libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index

libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host

libvirt: not setting user defined backing store format when creating new image

libvirt: ignoring defined disk backing store format when recursing into disk image backing stores

libvirt: ignoring defined main disk format when looking up disk backing stores

libvirt: libvirt_proxy buffer overflow

libvirt: missing checks for read-only connection