Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 22:55:07 +0000 CVE-2019-10161 https://vulnerability.circl.lu/vuln/cve-2019-10161 <p><strong>Affected:</strong> libvirt</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> <p><strong>Affected:</strong> libvirt</p> <p>It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.</p> https://vulnerability.circl.lu/vuln/cve-2019-10161 USN-4047-1 — libvirt vulnerabilities https://vulnerability.circl.lu/vuln/usn-4047-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libvirt, Ubuntu:18.04:LTS: libvirt</p> <p>Matthias Gerstner and Ján Tomko discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to check for arbitrary files, or execute arbitrary binaries. In the default installation, attackers would be isolated by the libvirt AppArmor profile.</p> https://vulnerability.circl.lu/vuln/usn-4047-1