GCVE - cpe:2.3:a:redhat:libvirt:1.2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:libvirt:1.2.0:*:*:*:*:*:*:*

part: a version: 1.2.0 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Libvirt (`cd719ae9-1c99-54f6-b7f6-5117db5cb7d8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:55.108765
`pkg:gitlab/libvirt/libvirt`	purl2cpe	2026-06-01 10:12:55.108766
`pkg:rpm/fedora/libvirt`	purl2cpe	2026-06-01 10:12:55.108768
`pkg:rpm/opensuse/libvirt`	purl2cpe	2026-06-01 10:12:55.108769

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0236`	vulnerable	2026-06-08 05:06:14.046898	Details available libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface. Published: 2015-01-29T15:00:00.000Z Updated: 2024-08-06T04:03:10.643Z Open on db.gcve.eu Reference links http://security.libvirt.org/2015/0001.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:070 http://advisories.mageia.org/MGASA-2015-0046.html http://lists.opensuse.org/opensuse-updates/2015-02/msg00028.html http://secunia.com/advisories/62766	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-7823`	vulnerable	2026-06-08 05:06:00.012140	Details available The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag. Published: 2014-11-13T15:00:00.000Z Updated: 2024-08-06T13:03:27.067Z Open on db.gcve.eu Reference links http://secunia.com/advisories/62058 http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://secunia.com/advisories/62303 http://www.ubuntu.com/usn/USN-2404-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5177`	vulnerable	2026-06-08 05:05:47.105351	Details available libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virDomainDefineXML, (2) virNetworkCreateXML, (3) virNetworkDefineXML, (4) virStoragePoolCreateXML, (5) virStoragePoolDefineXML, (6) virStorageVolCreateXML, (7) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virConnectDomainXMLFromNative, (12) virConnectDomainXMLToNative, (13) virSecretDefineXML, (14) virNWFilterDefineXML, (15) virDomainSnapshotCreateXML, (16) virDomainSaveImageDefineXML, (17) virDomainCreateXMLWithFiles, (18) virConnectCompareCPU, or (19) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT from CVE-2014-0179 per ADT3 due to different affected versions of some vectors. Published: 2014-08-03T18:00:00.000Z Updated: 2024-08-06T11:34:37.613Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-0560.html http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0179`	vulnerable	2026-06-08 05:05:12.085273	Details available libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods. Published: 2014-08-03T18:00:00.000Z Updated: 2024-08-06T09:05:39.165Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2014-0560.html http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://lists.opensuse.org/opensuse-updates/2014-05/msg00052.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0028`	vulnerable	2026-06-08 05:05:10.799005	Details available libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API. Published: 2014-01-24T18:00:00.000Z Updated: 2024-08-06T08:58:26.562Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2093-1 http://libvirt.org/news.html http://secunia.com/advisories/60895 http://security.gentoo.org/glsa/glsa-201412-04.xml http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6456`	vulnerable	2026-06-08 05:04:56.922051	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6436`	vulnerable	2026-06-08 05:04:56.816893	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.