libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Jan 24, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Jan 24, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 15, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-clientUpgrade libvirt-libsUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-hooksUpgrade libvirt-admin | Dec 18, 2015 | Jan 24, 2014 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Jan 24, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub