Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Libvirt (cd719ae9-1c99-54f6-b7f6-5117db5cb7d8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libvirt/libvirt |
purl2cpe | 2026-06-01 10:12:54.990850 |
pkg:gitlab/libvirt/libvirt |
purl2cpe | 2026-06-01 10:12:54.990852 |
pkg:rpm/fedora/libvirt |
purl2cpe | 2026-06-01 10:12:54.990853 |
pkg:rpm/opensuse/libvirt |
purl2cpe | 2026-06-01 10:12:54.990855 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8235 |
vulnerable | 2026-06-08 07:00:23.306918 |
Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
MEDIUM (6.2)
A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
Published: 2024-08-30T16:16:57.214Z
Updated: 2025-11-08T07:13:57.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2496 |
vulnerable | 2026-06-08 06:33:31.226166 |
Libvirt: null pointer dereference in udevconnectlistallinterfaces()
MEDIUM (5)
A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.
Published: 2024-03-18T12:54:17.647Z
Updated: 2025-11-08T06:49:39.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0897 |
vulnerable | 2026-06-08 05:39:11.430886 |
Details available
A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).
Published: 2022-03-25T00:00:00.000Z
Updated: 2024-08-02T23:47:42.099Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4147 |
vulnerable | 2026-06-08 05:38:08.519819 |
Details available
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
Published: 2022-03-25T00:00:00.000Z
Updated: 2024-08-03T17:16:04.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3975 |
vulnerable | 2026-06-08 05:33:58.317963 |
Details available
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
Published: 2022-08-23T00:00:00.000Z
Updated: 2024-08-03T17:09:09.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3667 |
vulnerable | 2026-06-08 05:33:53.365545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3631 |
vulnerable | 2026-06-08 05:33:53.216655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3559 |
vulnerable | 2026-06-08 05:33:52.787825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25637 |
vulnerable | 2026-06-08 05:22:36.974926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14339 |
vulnerable | 2026-06-08 05:19:23.027581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14301 |
vulnerable | 2026-06-08 05:19:22.877875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12430 |
vulnerable | 2026-06-08 05:17:58.179345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10703 |
vulnerable | 2026-06-08 05:16:35.689140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10701 |
vulnerable | 2026-06-08 05:16:35.686092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3886 |
vulnerable | 2026-06-08 05:13:56.302061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3840 |
vulnerable | 2026-06-08 05:13:56.174078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20485 |
vulnerable | 2026-06-08 05:13:40.693437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10168 |
vulnerable | 2026-06-08 05:12:22.391982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10167 |
vulnerable | 2026-06-08 05:12:22.391182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10166 |
vulnerable | 2026-06-08 05:12:22.387228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10161 |
vulnerable | 2026-06-08 05:12:22.375015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10132 |
vulnerable | 2026-06-08 05:12:22.306367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1064 |
vulnerable | 2026-06-08 05:11:16.807239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2635 |
vulnerable | 2026-06-08 05:09:24.832907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000256 |
vulnerable | 2026-06-08 05:08:34.391383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5008 |
vulnerable | 2026-06-08 05:07:55.978560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10746 |
vulnerable | 2026-06-08 05:07:25.670830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0236 |
vulnerable | 2026-06-08 05:06:14.045558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8131 |
vulnerable | 2026-06-08 05:06:07.797497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7823 |
vulnerable | 2026-06-08 05:06:00.011540 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3672 |
vulnerable | 2026-06-08 05:05:42.325509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1447 |
vulnerable | 2026-06-08 05:05:24.585505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7336 |
vulnerable | 2026-06-08 05:05:09.870663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6458 |
vulnerable | 2026-06-08 05:04:56.933940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6457 |
vulnerable | 2026-06-08 05:04:56.931257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5651 |
vulnerable | 2026-06-08 05:04:52.939912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4399 |
vulnerable | 2026-06-08 05:04:35.962872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4297 |
vulnerable | 2026-06-08 05:04:35.299395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4154 |
vulnerable | 2026-06-08 05:04:34.237631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2230 |
vulnerable | 2026-06-08 05:04:23.689693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1766 |
vulnerable | 2026-06-08 05:03:56.164621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0170 |
vulnerable | 2026-06-08 05:03:45.632669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4423 |
vulnerable | 2026-06-08 05:02:17.418954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2693 |
vulnerable | 2026-06-08 05:02:05.559878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2511 |
vulnerable | 2026-06-08 04:58:07.343665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1486 |
vulnerable | 2026-06-08 04:57:59.543776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.