Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:02:29 +0000 CVE-2019-10167 https://cve.radiocsirt.org/vuln/cve-2019-10167 <p><strong>Affected:</strong> libvirt</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> <p><strong>Affected:</strong> libvirt</p> <p>The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an &#34;emulatorbin&#34; argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain&#39;s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.</p> https://cve.radiocsirt.org/vuln/cve-2019-10167 USN-4047-1 — libvirt vulnerabilities https://cve.radiocsirt.org/vuln/usn-4047-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.</p> https://cve.radiocsirt.org/vuln/usn-4047-1