The libvirt Project libvirt
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-3886 | 4.8.0 and above | An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on th | MEDIUM 5.4 | 1.1 % | ||
| CVE-2019-3840 | 5.0.0 | A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU age | MEDIUM 6.3 | 1.5 % | ||
| CVE-2017-2635 | from 2.5.0 to 3.0.0 | A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could u | HIGH 7.7 | 1.5 % |