https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:10:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02445 bdu:2019-02445 https://cve.radiocsirt.org/vuln/bdu:2019-02445 https://cve.radiocsirt.org/vuln/bell-cve-2019-10166 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-10166 https://cve.radiocsirt.org/vuln/cnvd-2019-19291 cnvd-2019-19291 https://cve.radiocsirt.org/vuln/cnvd-2019-19291 https://cve.radiocsirt.org/vuln/euvd-2026-53379 EUVD-2026-53379 https://cve.radiocsirt.org/vuln/euvd-2026-53379 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10166 <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10166 https://cve.radiocsirt.org/vuln/ghsa-g9cg-gvh5-48hm <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> https://cve.radiocsirt.org/vuln/ghsa-g9cg-gvh5-48hm https://cve.radiocsirt.org/vuln/gsd-2019-10166 gsd-2019-10166 https://cve.radiocsirt.org/vuln/gsd-2019-10166 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1699 <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients libvirt: arbitrary command execution via virConnectGetDomainCapabilities API libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service</p> <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients libvirt: arbitrary command execution via virConnectGetDomainCapabilities API libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1699 https://cve.radiocsirt.org/vuln/suse-su-2019:1599-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1599-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10166 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libvirt</p> <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libvirt</p> <p>It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10166 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690