libvirt
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-13193 | < 11.10.0 | Libvirt: information disclosure via world-readable vm snapshots | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-12748 | ≤ 11.9.0 | Libvirt: denial of service in xml parsing | MEDIUM 5.5 | 0.2 % | ||
| CVE-2024-8235 | 10.4.0 – < 10.7.0 | Libvirt: crash of virtinterfaced via virconnectlistinterfaces() | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-4418 | < 10.4.0 | Libvirt: stack use-after-free in virnetclientioeventloop() | MEDIUM 6.2 | 0.5 % | ||
| CVE-2024-2494 | 9.0.0 – < 9.7.0 | Libvirt: negative g_new0 length can lead to unbounded memory allocation | MEDIUM 6.2 | 0.4 % | ||
| CVE-2024-2496 | 9.0.0 – < 9.7.0 | Libvirt: null pointer dereference in udevconnectlistallinterfaces() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-1441 | 9.7.0 | Libvirt: off-by-one error in udevlistinterfacesbystatus() | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-2700 | libvirt-4.5.0 | A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-3975 | Fixed in libvirt v7.1.0 | A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple thr | MEDIUM 6.5 | 1.6 % | ||
| CVE-2022-0897 | libvirt 8.0.0-8 | A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex b | MEDIUM 4.3 | 1.0 % | ||
| CVE-2021-4147 | libvirt 2.33.0 | A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock | MEDIUM 6.5 | 0.2 % | ||
| CVE-2021-3667 | Fixedin - libvert v7.6.0-rc1 and above | An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath f | MEDIUM 6.5 | 1.4 % | ||
| CVE-2021-3631 | Fixed-In - libvirt v7.5.0 | A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to a | MEDIUM 6.3 | 0.5 % | ||
| CVE-2020-14301 | libvirt 6.3.0 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were | MEDIUM 6.5 | 1.2 % | ||
| CVE-2020-10701 | libvirt 6.2.0 | A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This flaw allows read-on | MEDIUM 6.5 | 0.9 % | ||
| CVE-2021-3559 | libvirt 7.0.0 | A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and dr | MEDIUM 6.5 | 1.0 % | ||
| CVE-2020-14339 | libvirt 6.6.0 | A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows | HIGH 8.8 | 0.4 % | ||
| CVE-2020-25637 | libvirt versions before 6.8.0 | A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about net | MEDIUM 6.7 | 0.5 % |