GCVE - cpe:2.3:a:redhat:libvirt:0.6.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:libvirt:0.6.4:*:*:*:*:*:*:*

part: a version: 0.6.4 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Libvirt (`cd719ae9-1c99-54f6-b7f6-5117db5cb7d8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:54.991169
`pkg:gitlab/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:54.991171
`pkg:rpm/fedora/libvirt`	purl2cpe	2026-06-01 10:12:54.991172
`pkg:rpm/opensuse/libvirt`	purl2cpe	2026-06-01 10:12:54.991173

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-1447`	vulnerable	2026-06-08 05:05:24.605009	Details available Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T09:42:35.427Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://secunia.com/advisories/56446 http://www.debian.org/security/2014/dsa-2846 http://libvirt.org/news.html http://secunia.com/advisories/60895	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6458`	vulnerable	2026-06-08 05:04:56.934552	Details available Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T17:39:01.171Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://secunia.com/advisories/56446 http://www.debian.org/security/2014/dsa-2846 https://bugzilla.redhat.com/show_bug.cgi?id=1043069 http://libvirt.org/news.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6457`	vulnerable	2026-06-08 05:04:56.931875	Details available The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T17:39:01.627Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5651`	vulnerable	2026-06-08 05:04:52.958290	Details available The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune. Published: 2013-09-30T21:00:00.000Z Updated: 2024-08-06T17:15:21.455Z Open on db.gcve.eu Reference links http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=47b9127e883677a0d60d767030a147450e919a25 http://www.ubuntu.com/usn/USN-1954-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4399`	vulnerable	2026-06-08 05:04:35.963518	Details available The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing the connection. Published: 2014-12-12T15:00:00.000Z Updated: 2024-08-06T16:45:13.355Z Open on db.gcve.eu Reference links http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=8294aa0c1750dcb49d6345cd9bd97bf421580d8b http://www.securityfocus.com/bid/62972 http://security.libvirt.org/2013/0013.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4297`	vulnerable	2026-06-08 05:04:35.300298	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2230`	vulnerable	2026-06-08 05:04:23.709048	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1766`	vulnerable	2026-06-08 05:03:56.183758	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4423`	vulnerable	2026-06-08 05:02:17.419589	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2693`	vulnerable	2026-06-08 05:02:05.578829	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2511`	vulnerable	2026-06-08 04:58:07.344294	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1486`	vulnerable	2026-06-08 04:57:59.565699	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.