SUSE-SU-2019:1643-1: libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:1643-1 is a vulnerability in libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 21-06-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for libvirt This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). - CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have been used to alter the domain's config used for managedsave or execute arbitrary emulator binaries (bsc#1138302). - CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which could have been used to execute arbitrary emulators (bsc#1138303). - CVE-2019-10168: Fixed an issue with virConnect*HypervisorCPU API which could have been used to execute arbitrary emulators (bsc#1138305).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 5.1.0-8.6.1
- libvirt&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1< 5.1.0-8.6.1
1 vendor · 2 products