libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Jan 24, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Jan 24, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 15, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-docUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-client | Dec 18, 2015 | Jan 24, 2014 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Nov 8, 2024 | Jan 24, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub