Known vulnerabilities in libvirt - page 2

Software: libvirt
Software CPE: cpe:2.3:a:libvirt_org:libvirt:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 58
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libvirt libvirt is affected by 58 known vulnerabilities: 2 high, 24 medium, 32 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33986 - Improper Authentication
CVE-2016-5008
CWE-287 Medium
No
No
2.0.0 05.08.2020 SB2016071316
SB2016071919
SB2016071921
and 1 more
#VU32018 - Improper Access Control
CVE-2019-10166
CWE-284 Low
No
No
- 02.08.2019 SB2019080213
SB2019072014
SB2019070117
and 8 more
#VU32019 - Improper Access Control
CVE-2019-10167
CWE-284 Low
No
No
- 02.08.2019 SB2019080214
SB2019072014
SB2019070117
and 8 more
#VU18596 - Permissions, Privileges, and Access Controls
CVE-2019-10132
CWE-264 Low
No
No
- 24.05.2019 SB2019052403
SB2019061912
SB2019052312
and 5 more
#VU31094 - Security Features
CVE-2016-10746
CWE-254 Medium
No
No
1.3.1 18.04.2019 SB2019041824
#VU18154 - NULL Pointer Dereference
CVE-2019-3840
CWE-476 Medium
No
No
5.0.0 09.04.2019 SB2019040903
SB2019042905
SB2019042907
and 3 more
#VU11450 - Resource exhaustion
CVE-2018-1064
CWE-400 Low
No
No
- 02.04.2018 SB2018030114
SB2018031521
SB2018032910
and 5 more
#VU10793 - Permissions, Privileges, and Access Controls
CVE-2018-6764
CWE-264 Low
No
No
- 01.03.2018 SB2018020616
SB2018031521
SB2018040306
and 5 more
#VU41000 - Improper input validation
CVE-2014-8135
CWE-20 Low
No
No
- 19.12.2014 SB2014121904
#VU41014 - Improper input validation
CVE-2013-4399
CWE-20 Medium
No
No
- 12.12.2014 SB2014121208
#VU41108 - Credentials Management
CVE-2014-7823
CWE-255 Medium
No
No
- 13.11.2014 SB2014111304
#VU41243 - Resource Management Errors
CVE-2014-3657
CWE-399 Medium
No
No
- 06.10.2014 SB2014100602
#VU32532 - Improper input validation
CVE-2014-0179
CWE-20 Low
No
No
1.2.5 03.08.2014 SB2014080301
SB2014052602
#VU32531 - Improper Link Resolution Before File Access ('Link Following')
CVE-2013-6456
CWE-59 Low
No
No
1.2.2 16.04.2014 SB2014041601
SB2014052601
#VU32583 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2013-6458
CWE-362 Medium
No
No
1.2.1 24.01.2014 SB2014012401
SB2014020405
#VU32584 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2014-1447
CWE-362 Low
Available
No
1.2.1 24.01.2014 SB2014012402
SB2014020406
#VU42110 - Permissions, Privileges, and Access Controls
CVE-2013-6457
CWE-264 Low
No
No
- 24.01.2014 SB2014012404
#VU42111 - Permissions, Privileges, and Access Controls
CVE-2014-0028
CWE-264 Medium
No
No
- 24.01.2014 SB2014010705
#VU42175 - NULL Pointer Dereference
CVE-2013-6436
CWE-476 Low
No
No
- 07.01.2014 SB2014010705
#VU42406 - Permissions, Privileges, and Access Controls
CVE-2013-4401
CWE-264 Medium
No
No
- 02.11.2013 SB2013110204


Showing elements 21 - 40 out of 58