{"schemaVersion":3,"id":"USN-4047-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libvirt vulnerabilities\n\nMatthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled\ncertain API calls. An attacker could possibly use this issue to check for\narbitrary files, or execute arbitrary binaries. In the default\ninstallation, attackers would be isolated by the libvirt AppArmor profile.","dates":{"published":"2019-07-08T11:38:02.000Z","modified":"2026-04-22T09:58:08.611Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libvirt","name":"libvirt","label":"libvirt","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libvirt","purlType":"deb","versions":[{"text":"< 1.3.1-1ubuntu10.27","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.0-1ubuntu8.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.1-1ubuntu10.27 | < 4.0.0-1ubuntu8.12","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4047-1","label":"ubuntu.com/security/notices/USN-4047-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-10161","label":"ubuntu.com/security/CVE-2019-10161","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-10166","label":"ubuntu.com/security/CVE-2019-10166","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-10167","label":"ubuntu.com/security/CVE-2019-10167","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-10168","label":"ubuntu.com/security/CVE-2019-10168","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-10161","CVE-2019-10166","CVE-2019-10167"],"downstream":[],"duplicates":[],"related":["CVE-2019-10161","CVE-2019-10166","CVE-2019-10167"]},"timeline":[{"kind":"published","date":"2019-07-08T11:38:02.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:58:08.611Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T17:44:37.406Z","stale":false,"partial":false}}