https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:10:01 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:6409 <p><strong>Affected:</strong> AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more</p> <p>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.</p> <p>The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)</p> <p>Security Fix(es):</p> <p>* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more</p> <p>The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.</p> <p>The following packages have been upgraded to a later upstream version: libvirt (9.5.0). (BZ#2175785)</p> <p>Security Fix(es):</p> <p>* libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service (CVE-2023-3750)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:6409 https://cve.radiocsirt.org/vuln/bdu:2024-02835 bdu:2024-02835 https://cve.radiocsirt.org/vuln/bdu:2024-02835 https://cve.radiocsirt.org/vuln/euvd-2026-260411 EUVD-2026-260411 https://cve.radiocsirt.org/vuln/euvd-2026-260411 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3750 <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3750 https://cve.radiocsirt.org/vuln/ghsa-35p2-9fg3-f2p2 <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> https://cve.radiocsirt.org/vuln/ghsa-35p2-9fg3-f2p2 https://cve.radiocsirt.org/vuln/gsd-2023-3750 gsd-2023-3750 https://cve.radiocsirt.org/vuln/gsd-2023-3750 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3750 msrc_CVE-2023-3750 https://cve.radiocsirt.org/vuln/msrc_cve-2023-3750 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13061-1 <p>libvirt-9.5.0-2.1 on GA media</p> <p>libvirt-9.5.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13061-1 https://cve.radiocsirt.org/vuln/suse-su-2023:3043-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2023:3043-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3750 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt</p> <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt</p> <p>A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-3750 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1872 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1872