Known vulnerabilities in libvirt (Alpine package)

Vendor: Alpine Linux Development Team
Software: libvirt (Alpine package)
Software CPE: cpe:2.3:o:alpine:libvirt_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libvirt (Alpine package) libvirt (Alpine package) is affected by 20 known vulnerabilities: 1 high, 7 medium, 12 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48591 - Double Free
CVE-2020-25637		 CWE-415 Low
Available
No
 - 06.10.2020 SB2020112301
SB2020112303
SB2020112432
and 7 more
#VU46198 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14339		 CWE-200 Medium
No
No
 - 01.09.2020 SB2020090128
SB2020081714
SB2020091907
and 6 more
#VU33986 - Improper Authentication
CVE-2016-5008		 CWE-287 Medium
No
No
 1.2.11-r2 05.08.2020 SB2016071316
SB2016071919
SB2016071921
and 1 more
#VU27541 - Missing release of memory after effective lifetime
CVE-2020-12430		 CWE-401 Medium
No
No
 5.5.0-r1 05.05.2020 SB2020050513
SB2020052305
SB2020051287
and 1 more
#VU32018 - Improper Access Control
CVE-2019-10166		 CWE-284 Low
No
No
 5.5.0-r0 02.08.2019 SB2019080213
SB2019072014
SB2019070117
and 8 more
#VU32019 - Improper Access Control
CVE-2019-10167		 CWE-284 Low
No
No
 5.5.0-r0 02.08.2019 SB2019080214
SB2019072014
SB2019070117
and 8 more
#VU32020 - Improper Access Control
CVE-2019-10168		 CWE-284 Low
No
No
 5.5.0-r0 02.08.2019 SB2019080215
SB2019072014
SB2019070323
and 7 more
#VU18879 - Improper Access Control
CVE-2019-10161		 CWE-284 Low
No
No
 5.5.0-r0 23.06.2019 SB2019062004
SB2019072014
SB2019070117
and 8 more
#VU18154 - NULL Pointer Dereference
CVE-2019-3840		 CWE-476 Medium
No
No
 4.10.0-r2 09.04.2019 SB2019040903
SB2019042905
SB2019042907
and 3 more
#VU32062 - Improper Certificate Validation
CVE-2017-1000256		 CWE-295 High
No
No
 2.5.0-r2 31.10.2017 SB2017103117
SB2017112141
SB2017120410
and 1 more
#VU32532 - Improper input validation
CVE-2014-0179		 CWE-20 Low
No
No
 1.0.5.9-r1 03.08.2014 SB2014080301
SB2014052602
#VU33091 - Heap-based Buffer Overflow
CVE-2014-2892		 CWE-122 Medium
No
No
 1.0.5.9-r1 22.04.2014 SB2014052105
SB2016121150
#VU32531 - Improper Link Resolution Before File Access ('Link Following')
CVE-2013-6456		 CWE-59 Low
No
No
 1.0.5.9-r1 16.04.2014 SB2014041601
SB2014052601
#VU32583 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2013-6458		 CWE-362 Medium
No
No
 1.0.5.9-r0 24.01.2014 SB2014012401
SB2014020405
#VU32584 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-1447		 CWE-362 Low
Available
No
 1.0.5.9-r0 24.01.2014 SB2014012402
SB2014020406
#VU33102 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4492		 CWE-79 Low
No
No
 1.0.5.9-r0 07.12.2013 SB2014020532
#VU32594 - Permissions, Privileges, and Access Controls
CVE-2013-4311		 CWE-264 Low
No
No
 1.0.5.8-r0 04.10.2013 SB2013100401
SB2013122411
#VU32592 - Permissions, Privileges, and Access Controls
CVE-2013-4291		 CWE-264 Low
No
No
 1.0.5.8-r0 01.10.2013 SB2013100101
SB2013122409
#VU32593 - Memory corruption
CVE-2013-4296		 CWE-119 Low
No
No
 1.0.5.8-r0 01.10.2013 SB2013100102
SB2013122410
#VU32678 - Resource Management Errors
CVE-2013-1962		 CWE-399 Medium
No
No
 1.0.5-r1 29.05.2013 SB2013052902
SB2013051704