https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:41:59.187117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-04344 bdu:2015-04344 2026-10-03T18:41:59.376405+00:00 bdu:2015-04344 https://cve.radiocsirt.org/vuln/euvd-2026-107465 EUVD-2026-107465 2026-10-03T18:41:59.376443+00:00 EUVD-2026-107465 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4419 fkie_cve-2013-4419 2026-10-03T18:41:59.376464+00:00

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

 https://cve.radiocsirt.org/vuln/ghsa-3vxx-8f6w-cpxp GHSA-3vxx-8f6w-cpxp 2026-10-03T18:41:59.376498+00:00

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

 https://cve.radiocsirt.org/vuln/gsd-2013-4419 gsd-2013-4419 2026-10-03T18:41:59.376517+00:00 gsd-2013-4419 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10032-1 openSUSE-SU-2024:10032-1 — guestfs-data-1.32.4-11.1 on GA media 2026-10-03T18:41:59.376537+00:00

guestfs-data-1.32.4-11.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2013:1536 RHSA-2013:1536 — Red Hat Security Advisory: libguestfs security, bug fix, and enhancement update 2026-10-03T18:41:59.376558+00:00

libguestfs: insecure temporary directory handling for guestfish's network socket

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4419 UBUNTU-CVE-2013-4419 2026-10-03T18:41:59.376576+00:00

Affected: Ubuntu:16.04:LTS: libguestfs, Ubuntu:18.04:LTS: libguestfs, Ubuntu:20.04:LTS: libguestfs, Ubuntu:22.04:LTS: libguestfs, Ubuntu:24.04:LTS: libguestfs, Ubuntu:25.10: libguestfs, Ubuntu:26.04:LTS: libguestfs

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.