Red Hat Virtualization 4.3
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:virtualization:4.3:*:*:*:*:*:*:*
part: o version: 4.3 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Virtualization (86ab44fd-0554-5ff1-8c60-ae1b1ce4ff46) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-10168 |
vulnerable | 2026-06-08 05:12:22.392195 |
Details available
HIGH (8.8)
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
Published: 2019-08-02T12:08:14.000Z
Updated: 2024-08-04T22:10:10.037Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10167 |
vulnerable | 2026-06-08 05:12:22.391507 |
Details available
HIGH (8.8)
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
Published: 2019-08-02T12:05:52.000Z
Updated: 2024-08-04T22:10:09.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10166 |
vulnerable | 2026-06-08 05:12:22.390618 |
Details available
HIGH (7.8)
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.
Published: 2019-08-02T12:02:59.000Z
Updated: 2024-08-04T22:10:09.965Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.