libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Jan 29, 2015 |
| Oracle_linux | — | Upgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storageUpgrade libvirt | Oct 16, 2024 | Jan 29, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 22, 2015 |
| Suse | — | Upgrade libvirt-daemon-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-hooksUpgrade libvirtUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-adminUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemonUpgrade libvirt-daemon-xenUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secret | Dec 18, 2015 | Jan 29, 2015 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Feb 2, 2016 | Jan 29, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub