The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-login-shellUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-bash-completionUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbd | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade python3-hivexUpgrade libvirt-daemon-driver-network-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade seabiosUpgrade supermin-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade perl-Sys-GuestfsUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade seavgabios-binUpgrade netcf-develUpgrade lua-guestfsUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-toolsUpgrade libguestfs-gfs2Upgrade perl-hivexUpgrade libguestfs-inspect-iconsUpgrade superminUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-core-debuginfoUpgrade perl-hivex-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-xfsUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-libsUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade python3-libguestfsUpgrade libvirt-nssUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python-commonUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobject-debuginfoUpgrade qemu-img-debuginfoUpgrade libvirtUpgrade nbdkit-develUpgrade libvirt-clientUpgrade qemu-guest-agentUpgrade libiscsi-utils-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-bash-completionUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade hivexUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-sshUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-login-shellUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-rbdUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemonUpgrade ruby-libguestfs-debuginfoUpgrade virt-dib-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade netcf-libsUpgrade libvirt-python-debugsourceUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gobject-develUpgrade nbdkit-example-plugins-debuginfoUpgrade hivex-develUpgrade qemu-kvm-debugsourceUpgrade libguestfs-java-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-tools-cUpgrade python3-libguestfs-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-lock-sanlockUpgrade libguestfs-rsyncUpgrade supermin-debugsourceUpgrade libiscsi-develUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvmUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-javaUpgrade seabios-binUpgrade qemu-kvm-coreUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-imgUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbusUpgrade virt-v2v-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debuginfoUpgrade libvirt-develUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade hivex-debuginfoUpgrade lua-guestfs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade ruby-hivexUpgrade nbdkit-bash-completionUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-develUpgrade libvirt-client-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-adminUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-debuginfoUpgrade perl-Sys-VirtUpgrade python3-hivex-debuginfoUpgrade netcfUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-debuginfoUpgrade sgabios-binUpgrade nbdkitUpgrade libguestfsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libguestfs-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-gobjectUpgrade libguestfs-benchmarkingUpgrade libguestfs-java-develUpgrade virt-p2v-maker | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsi | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade ruby-hivexUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-glusterUpgrade libguestfs-man-pages-ukUpgrade libguestfs-toolsUpgrade libguestfs-benchmarkingUpgrade libvirt-bash-completionUpgrade libguestfs-xfsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-develUpgrade libvirt-daemon-kvmUpgrade hivex-develUpgrade seabios-binUpgrade libguestfsUpgrade netcfUpgrade lua-guestfsUpgrade qemu-kvmUpgrade libvirt-nssUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade libguestfs-gfs2Upgrade libvirt-login-shellUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-p2v-makerUpgrade nbdkit-develUpgrade netcf-libsUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade python3-libvirtUpgrade virt-dibUpgrade nbdkit-plugin-python3Upgrade seabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-hivexUpgrade libvirt-adminUpgrade netcf-develUpgrade libguestfs-gobject-develUpgrade libguestfs-winsupportUpgrade libguestfs-javadocUpgrade nbdkit-example-pluginsUpgrade libiscsi-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docsUpgrade libvirt-daemon-driver-lxcUpgrade qemu-kvm-commonUpgrade seavgabios-binUpgrade libguestfs-tools-cUpgrade nbdkitUpgrade qemu-kvm-block-curlUpgrade nbdkit-basic-pluginsUpgrade libguestfs-rescueUpgrade libssh2Upgrade qemu-kvm-block-rbdUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-lxcUpgrade libvirt-dbusUpgrade libiscsiUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade ruby-libguestfsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-gzipUpgrade qemu-guest-agentUpgrade libvirt-daemon-qemuUpgrade python3-hivexUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobjectUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-java-develUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade libguestfs-man-pages-jaUpgrade libvirtUpgrade superminUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-vddkUpgrade libguestfs-javaUpgrade qemu-kvm-block-iscsiUpgrade libvirt-libsUpgrade libiscsi-utilsUpgrade sgabios | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade nbdkit-plugin-gzip-debuginfoUpgrade seabiosUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobject-develUpgrade supermin-develUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-bash-completionUpgrade virt-p2v-makerUpgrade libguestfs-inspect-iconsUpgrade qemu-kvmUpgrade libvirt-bash-completionUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-python3Upgrade SLOFUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2-debugsourceUpgrade hivex-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debuginfoUpgrade netcfUpgrade libguestfs-toolsUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-lxcUpgrade nbdkit-example-pluginsUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-guest-agentUpgrade libvirt-nss-debuginfoUpgrade ruby-hivexUpgrade libguestfs-javaUpgrade libguestfs-xfsUpgrade sgabios-binUpgrade libguestfs-gfs2Upgrade libvirt-clientUpgrade virt-dibUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-adminUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-block-curl-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-plugin-xz-debuginfoUpgrade seabios-binUpgrade libvirt-dbusUpgrade libvirt-daemon-debuginfoUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-nssUpgrade python3-hivex-debuginfoUpgrade superminUpgrade libvirt-daemon-config-networkUpgrade hivex-debuginfoUpgrade perl-Sys-VirtUpgrade lua-guestfsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-login-shellUpgrade netcf-libsUpgrade libvirt-daemonUpgrade hivex-debugsourceUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-glusterUpgrade seavgabios-binUpgrade libguestfs-java-debuginfoUpgrade nbdkit-debuginfoUpgrade perl-hivexUpgrade libguestfs-debugsourceUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libiscsi-develUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade nbdkit-bash-completionUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade libguestfs-java-develUpgrade qemu-kvm-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-vddkUpgrade libguestfs-tools-cUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-imgUpgrade netcf-libs-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirtUpgrade libguestfsUpgrade libssh2-debuginfoUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfsUpgrade qemu-img-debuginfoUpgrade libguestfs-develUpgrade nbdkit-basic-pluginsUpgrade ruby-hivex-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-dbus-debugsourceUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-rsyncUpgrade lua-guestfs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libssh2Upgrade supermin-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-lock-sanlock-debuginfoUpgrade python3-hivexUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-debugsourceUpgrade libiscsi-debugsourceUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-rescueUpgrade netcf-develUpgrade sgabiosUpgrade supermin-debugsourceUpgrade virt-dib-debuginfoUpgrade libiscsiUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-coreUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debuginfoUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-qemuUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libvirt-nss | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt-daemonUpgrade libvirt-binUpgrade libvirt0Upgrade libvirt-clients | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub