The Libvirt Project Libvirt vulnerabilities

3 vulnerabilities

Known vulnerabilities in The Libvirt Project Libvirt, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2017-2635debianlibvirt+2
EPSS score
1.53%
A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.5.4CVE-2019-3886debianlibvirt+6
EPSS score
1.12%
An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.6.3CVE-2019-3840debianlibvirt+45
EPSS score
1.48%
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service.