Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

libguestfs libguestfs - vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2012-2690
virt-edit in libguestfs prior to 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Libguestfs Libguestfs 1.17.39Libguestfs Libguestfs 1.17.38Libguestfs Libguestfs 1.17.31Libguestfs Libguestfs 1.17.30Libguestfs Libguestfs 1.17.23Libguestfs Libguestfs 1.17.22Libguestfs Libguestfs 1.17.21Libguestfs Libguestfs 1.17.14Libguestfs Libguestfs 1.17.13Libguestfs Libguestfs 1.17.6Libguestfs Libguestfs 1.17.5Libguestfs Libguestfs 1.16.25Libguestfs Libguestfs 1.16.24Libguestfs Libguestfs 1.16.17Libguestfs Libguestfs 1.16.16Libguestfs Libguestfs 1.16.9Libguestfs Libguestfs 1.16.8Libguestfs Libguestfs 1.16.0Libguestfs Libguestfs 1.17.37Libguestfs Libguestfs 1.17.36Libguestfs Libguestfs 1.17.29Libguestfs Libguestfs 1.17.28
4.3
CVSSv2
CVE-2013-2124
Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x prior to 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote malicious users to cause a denial of service (crash) via empty guest files.
Libguestfs Libguestfs 1.21.39Libguestfs Libguestfs 1.21.38Libguestfs Libguestfs 1.21.37Libguestfs Libguestfs 1.21.30Libguestfs Libguestfs 1.21.29Libguestfs Libguestfs 1.21.22Libguestfs Libguestfs 1.21.21Libguestfs Libguestfs 1.21.13Libguestfs Libguestfs 1.21.12Libguestfs Libguestfs 1.21.5Libguestfs Libguestfs 1.21.4Libguestfs Libguestfs 1.20.1Libguestfs Libguestfs 1.20.2Libguestfs Libguestfs 1.21.34Libguestfs Libguestfs 1.21.33Libguestfs Libguestfs 1.21.26Libguestfs Libguestfs 1.21.25Libguestfs Libguestfs 1.21.18Libguestfs Libguestfs 1.21.17Libguestfs Libguestfs 1.21.9Libguestfs Libguestfs 1.21.8Libguestfs Libguestfs 1.21.1
4.7
CVSSv2
CVE-2010-3851
libguestfs prior to 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and previous versions, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted (1) qcow2, (2) VMDK, or (3) VDI header, r...
Libguestfs Libguestfs 1.5.20Libguestfs Libguestfs 1.5.21Libguestfs Libguestfs 1.5.15Libguestfs Libguestfs 1.5.14Libguestfs Libguestfs 1.5.9Libguestfs Libguestfs 1.5.6Libguestfs LibguestfsLibguestfs Libguestfs 1.5.0Libguestfs Libguestfs 1.5.1Libguestfs Libguestfs 1.5.19Libguestfs Libguestfs 1.5.18Libguestfs Libguestfs 1.5.10Libguestfs Libguestfs 1.5.5Libguestfs Libguestfs 1.5.17Libguestfs Libguestfs 1.5.16Libguestfs Libguestfs 1.5.8Libguestfs Libguestfs 1.5.11Libguestfs Libguestfs 1.5.2Libguestfs Libguestfs 1.5.3Libguestfs Libguestfs 1.5.13Libguestfs Libguestfs 1.5.12Libguestfs Libguestfs 1.5.4
4.3
CVSSv2
CVE-2022-2211
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.
Libguestfs Libguestfs -Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
4.4
CVSSv2
CVE-2019-9755
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbi...
Tuxera Ntfs-3g 2017.3.23Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook