Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat libvirt 0.4.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4399
The remoteClientFreeFunc function in daemon/remote.c in libvirt prior to 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote malicious users to cause a denial of service (use-after-free and crash) by registering an event...
Redhat Libvirt 0.4.1Redhat Libvirt 0.9.13Redhat Libvirt 0.8.6Redhat Libvirt 1.0.5.4Redhat LibvirtRedhat Libvirt 0.9.6.3Redhat Libvirt 0.9.2Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.9.5Redhat Libvirt 1.0.5.3Redhat Libvirt 0.5.0Redhat Libvirt 0.10.2.2Redhat Libvirt 0.9.11.3Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 1.0.5Redhat Libvirt 0.2.0
NA
CVE-2013-6457
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt prior to 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via...
Redhat Libvirt 0.0.5Redhat Libvirt 0.0.6Redhat Libvirt 0.1.0Redhat Libvirt 0.1.1Redhat Libvirt 0.10.2.4Redhat Libvirt 0.10.2.5Redhat Libvirt 0.10.2.6Redhat Libvirt 0.10.2.7Redhat Libvirt 0.4.3Redhat Libvirt 0.4.4Redhat Libvirt 0.4.5Redhat Libvirt 0.4.6Redhat Libvirt 0.7.5Redhat Libvirt 0.7.6Redhat Libvirt 0.7.7Redhat Libvirt 0.8.0Redhat Libvirt 0.9.11.2Redhat Libvirt 0.9.11.3Redhat Libvirt 0.9.11.4Redhat Libvirt 0.9.11.5Redhat Libvirt 0.9.6.3Redhat Libvirt 0.9.7
NA
CVE-2013-4297
The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and previous versions allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via unspecified vectors.
Redhat Libvirt 0.4.1Redhat Libvirt 0.9.13Redhat Libvirt 0.8.6Redhat Libvirt 0.9.6.3Redhat Libvirt 0.9.2Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.9.5Redhat Libvirt 0.5.0Redhat Libvirt 0.10.2.2Redhat Libvirt 0.9.11.3Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 1.0.5Redhat Libvirt 0.2.0Redhat Libvirt 0.9.11.8Redhat Libvirt 0.7.4Redhat Libvirt 0.9.10
NA
CVE-2013-5651
The virBitmapParse function in util/virbitmap.c in libvirt prior to 1.1.2 allows context-dependent malicious users to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune.
Redhat Libvirt 0.4.1Redhat Libvirt 0.9.13Redhat Libvirt 0.8.6Redhat Libvirt 1.0.5.4Redhat Libvirt 0.9.6.3Redhat Libvirt 0.9.2Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.9.5Redhat Libvirt 1.0.5.3Redhat Libvirt 0.5.0Redhat Libvirt 0.10.2.2Redhat LibvirtRedhat Libvirt 0.9.11.3Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 1.0.5Redhat Libvirt 0.2.0
NA
CVE-2013-2230
The qemu driver (qemu/qemu_driver.c) in libvirt prior to 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving "multiple events registration."
Redhat Libvirt 0.4.1Redhat Libvirt 0.9.13Redhat Libvirt 0.8.6Redhat Libvirt 0.9.6.3Redhat Libvirt 0.9.2Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.9.5Redhat Libvirt 0.5.0Redhat Libvirt 0.10.2.2Redhat Libvirt 0.9.11.3Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 1.0.5Redhat Libvirt 0.2.0Redhat Libvirt 0.9.11.8Redhat Libvirt 0.7.4Redhat Libvirt 0.9.10
NA
CVE-2013-1766
libvirt 1.0.2 and previous versions sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.
Redhat Libvirt 0.9.0Redhat Libvirt 0.1.9Redhat Libvirt 0.2.0Redhat Libvirt 0.1.7Redhat Libvirt 0.5.1Redhat Libvirt 0.8.0Redhat Libvirt 0.5.0Redhat Libvirt 0.8.1Redhat Libvirt 0.8.4Redhat Libvirt 0.4.4Redhat Libvirt 0.8.5Redhat Libvirt 0.4.3Redhat Libvirt 0.8.6Redhat Libvirt 0.9.5Redhat Libvirt 0.7.3Redhat Libvirt 0.9.6Redhat Libvirt 0.7.0Redhat LibvirtRedhat Libvirt 1.0.1Redhat Libvirt 1.0.0Redhat Libvirt 0.8.8Redhat Libvirt 0.2.2
NA
CVE-2012-4423
The virNetServerProgramDispatchCall function in libvirt prior to 0.10.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "...
Redhat Libvirt 0.4.1Redhat Libvirt 0.9.13Redhat Libvirt 0.8.6Redhat Libvirt 0.9.2Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.9.5Redhat Libvirt 0.5.0Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat LibvirtRedhat Libvirt 0.2.0Redhat Libvirt 0.7.4Redhat Libvirt 0.9.10Redhat Libvirt 0.4.4Redhat Libvirt 0.3.3Redhat Libvirt 0.0.2Redhat Libvirt 0.1.8
NA
CVE-2012-2693
libvirt, possibly prior to 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices.
Redhat Libvirt 0.2.0Redhat Libvirt 0.9.1Redhat Libvirt 0.9.0Redhat Libvirt 0.1.9Redhat Libvirt 0.2.2Redhat Libvirt 0.1.0Redhat Libvirt 0.1.4Redhat Libvirt 0.5.1Redhat Libvirt 0.6.3Redhat Libvirt 0.6.2Redhat Libvirt 0.8.4Redhat Libvirt 0.4.4Redhat Libvirt 0.0.2Redhat Libvirt 0.0.1Redhat Libvirt 0.7.7Redhat Libvirt 0.7.4Redhat Libvirt 0.9.6Redhat Libvirt 0.9.5Redhat Libvirt 0.8.8Redhat Libvirt 0.1.8Redhat Libvirt 0.2.3Redhat Libvirt 0.0.6
NA
CVE-2011-2511
Integer overflow in libvirt prior to 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
Redhat Libvirt 0.4.1Redhat Libvirt 0.8.6Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.5.0Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 0.2.0Redhat Libvirt 0.7.4Redhat Libvirt 0.4.4Redhat Libvirt 0.3.3Redhat Libvirt 0.0.2Redhat Libvirt 0.1.8Redhat Libvirt 0.3.0Redhat Libvirt 0.1.3Redhat Libvirt 0.1.9Redhat Libvirt 0.4.2Redhat Libvirt 0.8.5
NA
CVE-2011-1486
libvirtd in libvirt prior to 0.9.0 does not use thread-safe error reporting, which allows remote malicious users to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
Redhat Libvirt 0.4.1Redhat Libvirt 0.8.6Redhat Libvirt 0.4.5Redhat Libvirt 0.7.5Redhat Libvirt 0.0.6Redhat Libvirt 0.5.0Redhat Libvirt 0.7.2Redhat Libvirt 0.1.1Redhat Libvirt 0.0.3Redhat Libvirt 0.1.7Redhat Libvirt 0.0.1Redhat Libvirt 0.2.0Redhat Libvirt 0.7.4Redhat Libvirt 0.4.4Redhat Libvirt 0.3.3Redhat Libvirt 0.0.2Redhat Libvirt 0.1.8Redhat Libvirt 0.3.0Redhat Libvirt 0.1.3Redhat Libvirt 0.1.9Redhat Libvirt 0.4.2Redhat Libvirt 0.8.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook