libvirt

Libvirt contains a concurrency-driven null-pointer dereference in the udevConnectListAllInterfaces() path that can crash the libvirt management daemon and produce a denial‑of‑service on affected hosts; vendors and upstream have released small, surgical fixes, but the operational risk to...

Libvirt has been assigned CVE-2024-1441 for an off-by-one bug in the udevListInterfacesByStatus() function that can be triggered by an unprivileged client to crash the libvirt daemon, producing a denial-of-service condition for virtualization management on affected systems. Background Libvirt is...

The discovery of CVE-2024-2494 exposed a simple but dangerous class of bug inside libvirt’s RPC deserialization: a negative array length read from an attacker-controlled RPC message can be passed to GLib’s g_new0 allocator and — because the negative value is interpreted as a very large unsigned...

A small change in libvirt’s storage lookup code left a surprising attack surface: a race in the function virStoragePoolObjListSearch that can leave the caller with an unlocked object and allow a remote or local actor to force the libvirt daemon to crash, producing a denial‑of‑service condition...

A flaw in libvirt causes external inactive snapshots created for shut-down virtual machines to be written with world-readable permissions, allowing any local, unprivileged user on the host to read guest disk contents and resulting in a medium-severity information disclosure vulnerability tracked...

A newly cataloged libvirt vulnerability, tracked as CVE‑2025‑12748, lets a low‑privileged user submit specially crafted XML that is parsed before access controls are applied — triggering uncontrolled memory allocations and crashing the libvirt process on the host, producing a denial‑of‑service...

Xen Virtualization on Linux and Solaris: "First of all setup DNJL PPA to upgrade KVM/QEMU up to Qemu 0.12.5 & Libvirt 0.8.3 on Ubuntu Lucid Server and download the most recent Fedora virtio-win drivers from http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/bin as floppy and ISO...