Approved changes feed: RSS · Atom

cpe:2.3:a:libvirt:libvirt:0.5.1:*:*:*:*:*:*:*

part: a version: 0.5.1 update: *

VendorLibvirt (88f6ee2c-b11a-5d71-a8ed-502992e33bfd)
ProductLibvirt (37a5653b-8785-5494-b4fd-6da0a129d657)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/libvirt/libvirt purl2cpe 2026-06-01 10:12:18.833252
pkg:gitlab/libvirt/libvirt purl2cpe 2026-06-01 10:12:18.833254
pkg:rpm/fedora/libvirt purl2cpe 2026-06-01 10:12:18.833255
pkg:rpm/opensuse/libvirt purl2cpe 2026-06-01 10:12:18.833257

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2242 vulnerable 2026-06-08 04:54:12.431962 Details available
Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
Published: 2010-08-19T17:43:00.000Z
Updated: 2024-08-07T02:25:07.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0036 vulnerable 2026-06-08 04:51:07.147774 Details available
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header of a virProxyPacket packet, and then sending the remainder of the packet with crafted values in the header, related to use of uninitialized memory in a validation check.
Published: 2009-02-11T20:00:00.000Z
Updated: 2024-08-07T04:17:10.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5086 vulnerable 2026-06-08 04:50:49.463791 Details available
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
Published: 2008-12-19T17:00:00.000Z
Updated: 2024-08-07T10:40:17.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.