The Libvirt Project vulnerabilities
3 vulnerabilities
Known vulnerabilities in The Libvirt Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Libvirt3 vulnerabilities
CVE-2017-2635debianlibvirt+2
EPSS score1.53%
A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.CVE-2019-3886debianlibvirt+6EPSS score1.12%
An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.CVE-2019-3840debianlibvirt+45EPSS score1.48%
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.