Red Hat libvirt 1.2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:libvirt:1.2.2:*:*:*:*:*:*:*
part: a version: 1.2.2 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Libvirt (cd719ae9-1c99-54f6-b7f6-5117db5cb7d8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libvirt/libvirt |
purl2cpe | 2026-06-01 10:12:55.109010 |
pkg:gitlab/libvirt/libvirt |
purl2cpe | 2026-06-01 10:12:55.109011 |
pkg:rpm/fedora/libvirt |
purl2cpe | 2026-06-01 10:12:55.109013 |
pkg:rpm/opensuse/libvirt |
purl2cpe | 2026-06-01 10:12:55.109014 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-0236 |
vulnerable | 2026-06-08 05:06:14.048045 |
Details available
libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.
Published: 2015-01-29T15:00:00.000Z
Updated: 2024-08-06T04:03:10.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7823 |
vulnerable | 2026-06-08 05:06:00.013276 |
Details available
The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML_SECURE flag.
Published: 2014-11-13T15:00:00.000Z
Updated: 2024-08-06T13:03:27.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5177 |
vulnerable | 2026-06-08 05:05:47.106633 |
Details available
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virDomainDefineXML, (2) virNetworkCreateXML, (3) virNetworkDefineXML, (4) virStoragePoolCreateXML, (5) virStoragePoolDefineXML, (6) virStorageVolCreateXML, (7) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virConnectDomainXMLFromNative, (12) virConnectDomainXMLToNative, (13) virSecretDefineXML, (14) virNWFilterDefineXML, (15) virDomainSnapshotCreateXML, (16) virDomainSaveImageDefineXML, (17) virDomainCreateXMLWithFiles, (18) virConnectCompareCPU, or (19) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT from CVE-2014-0179 per ADT3 due to different affected versions of some vectors.
Published: 2014-08-03T18:00:00.000Z
Updated: 2024-08-06T11:34:37.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0179 |
vulnerable | 2026-06-08 05:05:12.088266 |
Details available
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
Published: 2014-08-03T18:00:00.000Z
Updated: 2024-08-06T09:05:39.165Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.