GCVE - cpe:2.3:a:redhat:libvirt:0.7.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:libvirt:0.7.4:*:*:*:*:*:*:*

part: a version: 0.7.4 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Libvirt (`cd719ae9-1c99-54f6-b7f6-5117db5cb7d8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:54.991202
`pkg:gitlab/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:54.991204
`pkg:rpm/fedora/libvirt`	purl2cpe	2026-06-01 10:12:54.991205
`pkg:rpm/opensuse/libvirt`	purl2cpe	2026-06-01 10:12:54.991207

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1447`	vulnerable	2026-06-08 05:05:24.608134	Details available Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T09:42:35.427Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://secunia.com/advisories/56446 http://www.debian.org/security/2014/dsa-2846 http://libvirt.org/news.html http://secunia.com/advisories/60895	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6458`	vulnerable	2026-06-08 05:04:56.934647	Details available Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T17:39:01.171Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://secunia.com/advisories/56446 http://www.debian.org/security/2014/dsa-2846 https://bugzilla.redhat.com/show_bug.cgi?id=1043069 http://libvirt.org/news.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6457`	vulnerable	2026-06-08 05:04:56.931971	Details available The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T17:39:01.627Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5651`	vulnerable	2026-06-08 05:04:52.961373	Details available The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune. Published: 2013-09-30T21:00:00.000Z Updated: 2024-08-06T17:15:21.455Z Open on db.gcve.eu Reference links http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=47b9127e883677a0d60d767030a147450e919a25 http://www.ubuntu.com/usn/USN-1954-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4399`	vulnerable	2026-06-08 05:04:35.963621	Details available The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection. Published: 2014-12-12T15:00:00.000Z Updated: 2024-08-06T16:45:13.355Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8294aa0c1750dcb49d6345cd9bd97bf421580d8b http://www.securityfocus.com/bid/62972 http://security.libvirt.org/2013/0013.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4297`	vulnerable	2026-06-08 05:04:35.300659	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2230`	vulnerable	2026-06-08 05:04:23.711985	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1766`	vulnerable	2026-06-08 05:03:56.186709	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4423`	vulnerable	2026-06-08 05:02:17.419688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2693`	vulnerable	2026-06-08 05:02:05.581898	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2511`	vulnerable	2026-06-08 04:58:07.344393	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1486`	vulnerable	2026-06-08 04:57:59.569351	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.