https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:33:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02852 bdu:2019-02852 https://cve.radiocsirt.org/vuln/bdu:2019-02852 https://cve.radiocsirt.org/vuln/bell-cve-2019-10161 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-10161 https://cve.radiocsirt.org/vuln/cnvd-2019-19048 cnvd-2019-19048 https://cve.radiocsirt.org/vuln/cnvd-2019-19048 https://cve.radiocsirt.org/vuln/euvd-2026-53420 EUVD-2026-53420 https://cve.radiocsirt.org/vuln/euvd-2026-53420 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10161 <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10161 https://cve.radiocsirt.org/vuln/ghsa-6cwp-pxj6-56c7 <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> https://cve.radiocsirt.org/vuln/ghsa-6cwp-pxj6-56c7 https://cve.radiocsirt.org/vuln/gsd-2019-10161 gsd-2019-10161 https://cve.radiocsirt.org/vuln/gsd-2019-10161 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1578 <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API</p> <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1578 https://cve.radiocsirt.org/vuln/suse-su-2019:14097-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2019:14097-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10161 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10161 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690