https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:33:45.710755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-02853 bdu:2019-02853 2026-10-03T08:33:45.756008+00:00 bdu:2019-02853 https://cve.radiocsirt.org/vuln/bell-cve-2019-10167 Withdrawn: BELL-CVE-2019-10167 — CVE-2019-10167 does not affect BellSoft software 2026-10-03T08:33:45.756056+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2019-19285 cnvd-2019-19285 2026-10-03T08:33:45.756076+00:00 cnvd-2019-19285 https://cve.radiocsirt.org/vuln/euvd-2026-53389 EUVD-2026-53389 2026-10-03T08:33:45.756090+00:00 EUVD-2026-53389 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10167 fkie_cve-2019-10167 2026-10-03T08:33:45.756100+00:00

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

 https://cve.radiocsirt.org/vuln/ghsa-5p5j-3wqp-w634 GHSA-5p5j-3wqp-w634 2026-10-03T08:33:45.756131+00:00

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

 https://cve.radiocsirt.org/vuln/gsd-2019-10167 gsd-2019-10167 2026-10-03T08:33:45.756148+00:00 gsd-2019-10167 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 openSUSE-SU-2019:1672-1 — Security update for libvirt 2026-10-03T08:33:45.756158+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/rhsa-2019:1699 RHSA-2019:1699 — Red Hat Security Advisory: redhat-virtualization-host security and enhancement update 2026-10-03T08:33:45.756177+00:00

libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients libvirt: arbitrary command execution via virConnectGetDomainCapabilities API libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2019:1599-1 SUSE-SU-2019:1599-1 — Security update for libvirt 2026-10-03T08:33:45.756204+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10167 UBUNTU-CVE-2019-10167 2026-10-03T08:33:45.756219+00:00

Affected: Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt

The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690 WID-SEC-W-2023-1690 — libvirt: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2026-10-03T08:33:45.756243+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.