https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:05:16.489352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-108666 EUVD-2026-108666 2026-10-03T20:05:16.865888+00:00 EUVD-2026-108666 https://cve.radiocsirt.org/vuln/fkie_cve-2013-6456 fkie_cve-2013-6456 2026-10-03T20:05:16.865934+00:00

The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.

 https://cve.radiocsirt.org/vuln/ghsa-4c8j-w686-c2jw GHSA-4c8j-w686-c2jw 2026-10-03T20:05:16.865982+00:00

The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.

 https://cve.radiocsirt.org/vuln/gsd-2013-6456 gsd-2013-6456 2026-10-03T20:05:16.866036+00:00 gsd-2013-6456 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10209-1 openSUSE-SU-2024:10209-1 — libvirt-2.5.0-1.1 on GA media 2026-10-03T20:05:16.866076+00:00

libvirt-2.5.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-6456 Withdrawn: UBUNTU-CVE-2013-6456 2026-10-03T20:05:16.866116+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: libvirt

The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the container; (2) create arbitrary nodes (mknod) via the virDomainDeviceAttach API and a symlink attack on /dev in the container; and cause a denial of service (shutdown or reboot host OS) via the (3) virDomainShutdown or (4) virDomainReboot API and a symlink attack on /dev/initctl in the container, related to "paths under /proc/$PID/root" and the virInitctlSetRunLevel function.