https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T22:55:06.928460+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-10161 CVE-2019-10161 2026-09-28T22:55:06.967598+00:00

Affected: libvirt

It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.

 https://vulnerability.circl.lu/vuln/usn-4047-1 USN-4047-1 — libvirt vulnerabilities 2026-09-28T22:55:06.967867+00:00

Affected: Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt

Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.