Lucene search
Veracode Vulnerability DatabaseVERACODE:20592HistoryJun 24, 2019 - 12:21 a.m.
Arbitrary Code Execution
2019-06-2400:21:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.0004 Low
EPSS
Percentile
5.3%
libvirt is vulnerable to arbitrary code execution. The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() in libvirt APIs accept an “emulator” argument to specify the program providing emulation for a domain and libvirt will execute that program to probe the domain’s capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
Related
cve
cve
CVE-2019-10168
2019-08-02 13:15:12
osv
osv
CVE-2019-10168
2019-08-02 13:15:12
nvd
nvd
CVE-2019-10168
2019-08-02 13:15:12
veracode
veracode
Arbitrary Command Execution
2019-07-09 02:58:30
redhatcve
redhatcve
CVE-2019-10168
2019-06-20 12:22:13
cvelist
cvelist
CVE-2019-10168
2019-08-02 12:08:14
alpinelinux
alpinelinux
CVE-2019-10168
2019-08-02 13:15:12
debiancve
debiancve
CVE-2019-10168
2019-08-02 13:15:12
prion
prion
Design/Logic Flaw
2019-08-02 13:15:00
ubuntucve
ubuntucve
CVE-2019-10168
2019-06-20 00:00:00
nessus
nessus
Photon OS 3.0: Libvirt PHSA-2019-3.0-0032
2019-10-22 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : libvirt (EulerOS-SA-2019-1957)
2019-09-17 00:00:00
EulerOS 2.0 SP8 : libvirt (EulerOS-SA-2019-1774)
2019-07-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libvirt (EulerOS-SA-2019-1957)
2020-01-23 00:00:00
CentOS Update for libvirt CESA-2019:1579 centos7
2019-06-21 00:00:00
openSUSE: Security Advisory for libvirt (openSUSE-SU-2019:1753-1)
2020-01-09 00:00:00
redhat
redhat
(RHSA-2019:1580) Important: virt:rhel security update
2019-06-20 12:44:28
(RHSA-2019:1579) Important: libvirt security and bug fix update
2019-06-20 12:44:11
(RHSA-2019:1762) Important: virt:8.0.0 security update
2019-07-11 15:06:35
oraclelinux
oraclelinux
libvirt security and bug fix update
2019-06-21 00:00:00
libvirt security update
2019-07-10 00:00:00
virt:rhel security update
2019-07-30 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2019-07-08 00:00:00
centos
centos
libvirt security update
2019-06-20 20:39:11
gentoo
gentoo
libvirt: Multiple vulnerabilities
2020-03-15 00:00:00
suse
suse
Security update for libvirt (important)
2019-07-20 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerabilities
2019-12-15 21:03:05
photon
photon
Critical Photon OS Security Update - PHSA-2019-0032
2019-10-04 00:00:00
Critical Photon OS Security Update - PHSA-2019-3.0-0032
2019-10-04 00:00:00
amazon
amazon
Important: libvirt
2019-08-23 03:34:00
fedora
fedora
[SECURITY] Fedora 30 Update: libvirt-5.1.0-9.fc30
2019-07-09 00:56:34
[SECURITY] Fedora 29 Update: libvirt-4.7.0-5.fc29
2019-07-09 02:25:07