The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virConnectCompareCPU or (2) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT per ADT3 due to different affected versions of some vectors. CVE-2014-5177 is used for other API methods.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 30, 2017 | Apr 15, 2014 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-login-shellUpgrade libvirtUpgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-pythonUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxc | Dec 1, 2016 | Aug 3, 2014 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 3, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Aug 3, 2014 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-pythonUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-network | Oct 16, 2024 | Aug 3, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 6, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-hooksUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-32bitUpgrade libvirt-daemon-lxcUpgrade libvirt-devel-32bitUpgrade libvirt-adminUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-qemuUpgrade libvirt-docUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-core | Dec 18, 2015 | Jun 12, 2014 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Aug 3, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub