https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:33:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02853 bdu:2019-02853 https://cve.radiocsirt.org/vuln/bdu:2019-02853 https://cve.radiocsirt.org/vuln/bell-cve-2019-10167 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-10167 https://cve.radiocsirt.org/vuln/cnvd-2019-19285 cnvd-2019-19285 https://cve.radiocsirt.org/vuln/cnvd-2019-19285 https://cve.radiocsirt.org/vuln/euvd-2026-53389 EUVD-2026-53389 https://cve.radiocsirt.org/vuln/euvd-2026-53389 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10167 <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10167 https://cve.radiocsirt.org/vuln/ghsa-5p5j-3wqp-w634 <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-5p5j-3wqp-w634 https://cve.radiocsirt.org/vuln/gsd-2019-10167 gsd-2019-10167 https://cve.radiocsirt.org/vuln/gsd-2019-10167 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1672-1 https://cve.radiocsirt.org/vuln/rhsa-2019:1699 <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients libvirt: arbitrary command execution via virConnectGetDomainCapabilities API libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service</p> <p>libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients libvirt: arbitrary command execution via virConnectGetDomainCapabilities API libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1699 https://cve.radiocsirt.org/vuln/suse-su-2019:1599-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1599-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10167 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10167 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libvirt ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1690