Known vulnerabilities in libvirt (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libvirt (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libvirt_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
19
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
10.5.0-7.el9_5
1.1.1-29.el7_0.4
0.10.2-46.el6_6.2
1.1.1-29.el7_0.3
1.1.1-29.el7_0.1
0.10.2-29.el6_5.8
0.10.2-29.el6_5.3
0.10.2-18.el6_4.14
0.10.2-18.el6_4.5
0.9.10-21.el6_3.8
0.9.10-21.el6_3.5
0.9.10-21.el6_3.4
0.9.4-23.el6_2.4
0.8.7-18.el6_1.1
0.8.1-27.el6_0.6
0.8.2-15.el5_6.4
0.8.2-15.el5_6.3
0.8.1-27.el6_0.5
0.6.3-33.el5_5.3
0.3.3-14.el5_3.1
10.0.0-6.2.el9_4
10.0.0-6.el9_4
9.5.0-7.el9_3
9.0.0-10.2.el9_2
4.5.0-36.el7_9.3
4.5.0-10.el7_6.12
0.10.2-29.el6_5.18
0.10.2-46.el6_6.10
2.0.0-10.el7_3.14
1.2.17-13.el7_2.10
3.2.0-14.el7_4.13
3.9.0-14.el7_5.9
0.10.2-64.el6_10.1
4.5.0-10.el7_6.9
1.2.17-13.el7_2.9
0.10.2-46.el6_6.9
0.10.2-18.el6_4.18
0.10.2-29.el6_5.17
1.2.17-13.el7_2.8
0.10.2-46.el6_6.8
0.10.2-29.el6_5.16
0.10.2-18.el6_4.17
8.5.0-7.el9_1
4.5.0-36.el7
4.5.0-23.el7
0.8.2-22.el5
0.8.2-29.el5
1.2.8-16.el7
1.2.17-13.el7
4.5.0-23.el7_7
4.5.0-10.el7_6
4.5.0-10.el7
3.9.0-14.el7_5
3.9.0-14.el7
3.2.0-14.el7_4
3.2.0-14.el7
2.0.0-10.el7_3
2.0.0-10.el7
1.2.17-13.el7_2
1.2.8-16.el7_1
1.1.1-29.el7_0
1.1.1-29.el7
0.9.4-23.el6_2
0.9.4-23.el6
0.8.7-18.el6_1
0.8.7-18.el6
0.8.1-27.el6_0
0.8.1-27.el6
0.10.2-64.el6_10
0.10.2-64.el6
0.10.2-62.el6_9
0.9.10-21.el6
0.10.2-62.el6
0.10.2-60.el6
0.10.2-54.el6_7
0.10.2-54.el6
0.10.2-46.el6_6
0.10.2-46.el6
0.10.2-29.el6_5
0.10.2-29.el6
0.10.2-18.el6_4
0.10.2-18.el6
0.9.10-21.el6_3
Vulnerabilities (19)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100250 - NULL Pointer Dereference CVE-2024-8235 |
CWE-476 | Low | 10.5.0-7.el9_5 | 12.11.2024 |
SB2024111272 SB2024111274 |
||
| #VU88535 - NULL Pointer Dereference CVE-2024-2496 |
CWE-476 | Low | 10.0.0-6.el9_4 | 15.04.2024 |
SB2024041541 SB2024041542 SB2024043065 and 3 more |
||
| #VU87970 - Uncontrolled Memory Allocation CVE-2024-2494 |
CWE-789 | Low | 10.0.0-6.2.el9_4 | 02.04.2024 |
SB2024040216 SB2024040222 SB2024040231 and 9 more |
||
| #VU87448 - Off-by-one Error CVE-2024-1441 |
CWE-193 | Low | 10.0.0-6.2.el9_4 | 12.03.2024 |
SB20240312330 SB20240312332 SB20240312333 and 6 more |
||
| #VU78694 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2023-3750 |
CWE-362 | Medium | 9.5.0-7.el9_3 | 26.07.2023 |
SB2023072647 SB2023072649 SB2023073149 and 4 more |
||
| #VU76721 - Missing release of memory after effective lifetime CVE-2023-2700 |
CWE-401 | Low | 9.0.0-10.2.el9_2 | 31.05.2023 |
SB2023053145 SB2023053152 SB2023060225 and 12 more |
||
| #VU62739 - Improper Locking CVE-2022-0897 |
CWE-667 | Medium | 8.5.0-7.el9_1 | 03.05.2022 |
SB2022050304 SB2022050308 SB2022101708 and 8 more |
||
| #VU48591 - Double Free CVE-2020-25637 |
CWE-415 | Low | 4.5.0-36.el7_9.3 | 06.10.2020 |
SB2020112301 SB2020112303 SB2020112432 and 7 more |
||
| #VU28191 - Resource Management Errors CVE-2020-10703 |
CWE-399 | Low | 4.5.0-36.el7 | 23.05.2020 |
SB2020031934 SB2020052305 SB2020093025 and 2 more |
||
| #VU27545 - Resource Management Errors CVE-2019-20485 |
CWE-399 | Medium | 4.5.0-36.el7 | 05.05.2020 |
SB2020031934 SB2020093025 SB2020110507 and 1 more |
||
| #VU32018 - Improper Access Control CVE-2019-10166 |
CWE-284 | Low | 4.5.0-10.el7_6.12 | 02.08.2019 |
SB2019080213 SB2019072014 SB2019070117 and 8 more |
||
| #VU32019 - Improper Access Control CVE-2019-10167 |
CWE-284 | Low | 4.5.0-10.el7_6.12 | 02.08.2019 |
SB2019080214 SB2019072014 SB2019070117 and 8 more |
||
| #VU32020 - Improper Access Control CVE-2019-10168 |
CWE-284 | Low | 4.5.0-10.el7_6.12 | 02.08.2019 |
SB2019080215 SB2019072014 SB2019070323 and 7 more |
||
| #VU18879 - Improper Access Control CVE-2019-10161 |
CWE-284 | Low | 4.5.0-10.el7_6.12 | 23.06.2019 |
SB2019062004 SB2019072014 SB2019070117 and 8 more |
||
| #VU28395 - Exposure of sensitive information to an unauthorized actor CVE-2018-12127 |
CWE-200 | Low | 0.10.2-29.el6_5.18, 0.10.2-46.el6_6.10, 0.10.2-64.el6_10.1, 1.2.17-13.el7_2.10, 2.0.0-10.el7_3.14, 3.2.0-14.el7_4.13, 3.9.0-14.el7_5.9, 4.5.0-10.el7_6.9 | 30.05.2019 |
SB2019053010 SB2019051422 SB2019072469 and 67 more |
||
| #VU28396 - Exposure of sensitive information to an unauthorized actor CVE-2018-12130 |
CWE-200 | Low | 0.10.2-29.el6_5.18, 0.10.2-46.el6_6.10, 0.10.2-64.el6_10.1, 1.2.17-13.el7_2.10, 2.0.0-10.el7_3.14, 3.2.0-14.el7_4.13, 3.9.0-14.el7_5.9, 4.5.0-10.el7_6.9 | 30.05.2019 |
SB2019053011 SB2019051422 SB2019072469 and 67 more |
||
| #VU28397 - Exposure of sensitive information to an unauthorized actor CVE-2018-12126 |
CWE-200 | Low | 0.10.2-29.el6_5.18, 0.10.2-46.el6_6.10, 0.10.2-64.el6_10.1, 1.2.17-13.el7_2.10, 2.0.0-10.el7_3.14, 3.2.0-14.el7_4.13, 3.9.0-14.el7_5.9, 4.5.0-10.el7_6.9 | 30.05.2019 |
SB2019053012 SB2019051422 SB2019072469 and 67 more |
||
| #VU28398 - Exposure of sensitive information to an unauthorized actor CVE-2019-11091 |
CWE-200 | Low | 0.10.2-29.el6_5.18, 0.10.2-46.el6_6.10, 0.10.2-64.el6_10.1, 1.2.17-13.el7_2.10, 2.0.0-10.el7_3.14, 3.2.0-14.el7_4.13, 3.9.0-14.el7_5.9, 4.5.0-10.el7_6.9 | 30.05.2019 |
SB2019053013 SB2019051422 SB2019072469 and 67 more |
||
| #VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3639 |
CWE-362 | Low | 0.10.2-18.el6_4.17, 0.10.2-18.el6_4.18, 0.10.2-29.el6_5.16, 0.10.2-29.el6_5.17, 0.10.2-46.el6_6.8, 0.10.2-46.el6_6.9, 1.2.17-13.el7_2.8, 1.2.17-13.el7_2.9 | 22.05.2018 |
SB2018052201 SB2018052207 SB2018052208 and 142 more |