https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:11:26 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-18917 <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:25: libvirt, Alpaquita:stream: libvirt</p> <p><strong>Affected:</strong> Alpaquita:23: libvirt, Alpaquita:25: libvirt, Alpaquita:stream: libvirt</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-18917 https://cve.radiocsirt.org/vuln/euvd-2026-382094 EUVD-2026-382094 https://cve.radiocsirt.org/vuln/euvd-2026-382094 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18917 <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18917 https://cve.radiocsirt.org/vuln/ghsa-6jq9-9f7w-h7mc <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-6jq9-9f7w-h7mc https://cve.radiocsirt.org/vuln/msrc_cve-2026-18917 msrc_CVE-2026-18917 https://cve.radiocsirt.org/vuln/msrc_cve-2026-18917 https://cve.radiocsirt.org/vuln/oesa-2026-3632 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&amp;apos;s memory, potentially leading to a denial of service or local privilege escalation.(CVE-2026-18917)</p> <p>An injection vulnerability was found in libvirt&amp;apos;s virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.(CVE-2026-61477)</p> <p>A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-l…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libvirt</p> <p>Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es):</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&amp;apos;s memory, potentially leading to a denial of service or local privilege escalation.(CVE-2026-18917)</p> <p>An injection vulnerability was found in libvirt&amp;apos;s virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.(CVE-2026-61477)</p> <p>A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-l…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3632 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11622-1 <p>libvirt-12.6.0-2.1 on GA media</p> <p>libvirt-12.6.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11622-1 https://cve.radiocsirt.org/vuln/rhsa-2026:68509 <p>libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow</p> <p>libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow</p> https://cve.radiocsirt.org/vuln/rhsa-2026:68509 https://cve.radiocsirt.org/vuln/suse-su-2026:23445-1 <p>Security update for libvirt</p> <p>Security update for libvirt</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23445-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18917 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt-hwe</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:Pro:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt, Ubuntu:26.04:LTS: libvirt-hwe</p> <p>A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon&#39;s memory, potentially leading to a denial of service or local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18917 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2954 <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder Berechtigungen zu erweitern.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial-of-Service-Zustand zu verursachen oder Berechtigungen zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2954