Approved changes feed: RSS · Atom

cpe:2.3:a:libvirt:libvirt:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorLibvirt (88f6ee2c-b11a-5d71-a8ed-502992e33bfd)
ProductLibvirt (37a5653b-8785-5494-b4fd-6da0a129d657)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/libvirt/libvirt purl2cpe 2026-06-01 10:12:18.861397
pkg:gitlab/libvirt/libvirt purl2cpe 2026-06-01 10:12:18.861399
pkg:rpm/fedora/libvirt purl2cpe 2026-06-01 10:12:18.861400
pkg:rpm/opensuse/libvirt purl2cpe 2026-06-01 10:12:18.861402

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3657 vulnerable 2026-06-08 05:05:42.190609 Details available
The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.
Published: 2014-10-06T14:00:00.000Z
Updated: 2024-08-06T10:50:17.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3633 vulnerable 2026-06-08 05:05:41.946880 Details available
The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
Published: 2014-10-06T14:00:00.000Z
Updated: 2024-08-06T10:50:17.943Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.