https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:26:07 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:18326 <p><strong>Affected:</strong> AlmaLinux:10: libvirt, AlmaLinux:10: libvirt-client, AlmaLinux:10: libvirt-client-qemu, AlmaLinux:10: libvirt-daemon, AlmaLinux:10: libvirt-daemon-common, AlmaLinux:10: libvirt-daemon-config-network, AlmaLinux:10: libvirt-daemon-config-nwfilter, AlmaLinux:10: libvirt-daemon-driver-interface, AlmaLinux:10: libvirt-daemon-driver-network, AlmaLinux:10: libvirt-daemon-driver-nodedev and 22 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* libvirt: Denial of service in XML parsing (CVE-2025-12748)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libvirt, AlmaLinux:10: libvirt-client, AlmaLinux:10: libvirt-client-qemu, AlmaLinux:10: libvirt-daemon, AlmaLinux:10: libvirt-daemon-common, AlmaLinux:10: libvirt-daemon-config-network, AlmaLinux:10: libvirt-daemon-config-nwfilter, AlmaLinux:10: libvirt-daemon-driver-interface, AlmaLinux:10: libvirt-daemon-driver-network, AlmaLinux:10: libvirt-daemon-driver-nodedev and 22 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* libvirt: Denial of service in XML parsing (CVE-2025-12748)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:18326 https://cve.radiocsirt.org/vuln/bdu:2025-16420 bdu:2025-16420 https://cve.radiocsirt.org/vuln/bdu:2025-16420 https://cve.radiocsirt.org/vuln/bell-cve-2025-12748 <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:25: libvirt, Alpaquita:stream: libvirt</p> <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:25: libvirt, Alpaquita:stream: libvirt</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-12748 https://cve.radiocsirt.org/vuln/euvd-2026-331233 EUVD-2026-331233 https://cve.radiocsirt.org/vuln/euvd-2026-331233 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12748 <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12748 https://cve.radiocsirt.org/vuln/ghsa-qwrw-p888-cc55 <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/ghsa-qwrw-p888-cc55 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12748 msrc_CVE-2025-12748 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12748 https://cve.radiocsirt.org/vuln/oesa-2025-2810 <p><strong>Affected:</strong> openEuler:24.03-LTS: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.(CVE-2025-12748)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.(CVE-2025-12748)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2810 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15746-1 <p>libvirt-11.9.0-2.1 on GA media</p> <p>libvirt-11.9.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15746-1 https://cve.radiocsirt.org/vuln/rhsa-2026:18326 <p>libvirt: Denial of service in XML parsing</p> <p>libvirt: Denial of service in XML parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2026:18326 https://cve.radiocsirt.org/vuln/rlsa-2026:18326 <p><strong>Affected:</strong> Rocky Linux:10: libvirt</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* libvirt: Denial of service in XML parsing (CVE-2025-12748)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: libvirt</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* libvirt: Denial of service in XML parsing (CVE-2025-12748)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:18326 https://cve.radiocsirt.org/vuln/suse-su-2025:21082-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21082-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12748 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:25.10: libvirt, Ubuntu:26.04:LTS: libvirt</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:25.10: libvirt, Ubuntu:26.04:LTS: libvirt</p> <p>A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12748 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1598 <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1598