Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-devel | Dec 1, 2016 | Aug 19, 2010 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 19, 2010 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirtUpgrade libvirt-python | Oct 16, 2024 | Aug 19, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2010 |
| Suse | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-xenUpgrade libvirt-develUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-client-qemuUpgrade libvirt-client-32bitUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-logUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-daemon-proxyUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-core | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Aug 19, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub