The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-debuginfoUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-lxcUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-adminUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libvirtUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade netcfUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-networkUpgrade libguestfs-develUpgrade nbdkit-example-pluginsUpgrade qemu-imgUpgrade libvirt-python-debugsourceUpgrade ruby-hivexUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libguestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade lua-guestfs-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-debuginfoUpgrade python3-hivex-debuginfoUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkitUpgrade nbdkit-plugin-vddk-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-debuginfoUpgrade sgabios-binUpgrade libvirt-develUpgrade libvirt-debugsourceUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-man-pages-jaUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade netcf-libsUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-adminUpgrade libvirt-client-debuginfoUpgrade libguestfs-java-debuginfoUpgrade hivex-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-lock-sanlockUpgrade libssh2Upgrade libiscsi-develUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade hivex-develUpgrade libguestfs-gobjectUpgrade libguestfsUpgrade virt-dibUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-winsupportUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-gzipUpgrade libvirt-docsUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvmUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-debugsourceUpgrade qemu-kvm-coreUpgrade libvirt-dbusUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-javaUpgrade virt-v2v-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-plugin-xz-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade netcf-libs-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade perl-Sys-Virt-debugsourceUpgrade libiscsi-debuginfoUpgrade libguestfs-gfs2Upgrade qemu-kvm-core-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-develUpgrade libvirt-dbus-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-admin-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirtUpgrade libvirt-nssUpgrade nbdkit-plugin-python-commonUpgrade libvirt-debuginfoUpgrade perl-Sys-GuestfsUpgrade perl-Sys-Guestfs-debuginfoUpgrade netcf-develUpgrade libguestfs-xfsUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-inspect-iconsUpgrade libguestfs-toolsUpgrade python3-hivexUpgrade python3-libguestfsUpgrade lua-guestfsUpgrade libvirt-lock-sanlock-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-login-shellUpgrade qemu-guest-agentUpgrade virt-dib-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemonUpgrade perl-hivexUpgrade libguestfs-bash-completionUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-python3-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade qemu-kvm-commonUpgrade supermin-debuginfoUpgrade libguestfs-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libssh2-debugsourceUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade sgabiosUpgrade nbdkit-debugsourceUpgrade libvirt-libsUpgrade libvirt-nss-debuginfoUpgrade hivexUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-ssh | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpath | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libguestfs-gobjectUpgrade libvirt-daemon-qemuUpgrade nbdkit-plugin-python-commonUpgrade python3-hivexUpgrade qemu-imgUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-GuestfsUpgrade libguestfs-develUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkitUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade hivexUpgrade qemu-kvm-block-curlUpgrade libguestfs-bash-completionUpgrade libguestfs-tools-cUpgrade libvirt-dbusUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-rbdUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rescueUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade superminUpgrade python3-libguestfsUpgrade qemu-kvm-block-sshUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-coreUpgrade nbdkit-basic-pluginsUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade ruby-libguestfsUpgrade libssh2Upgrade libiscsi-utilsUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade libguestfs-java-develUpgrade perl-Sys-VirtUpgrade sgabiosUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-glusterUpgrade libvirt-bash-completionUpgrade libguestfs-winsupportUpgrade libiscsi-develUpgrade perl-hivexUpgrade nbdkit-plugin-python3Upgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade netcfUpgrade libguestfsUpgrade qemu-kvmUpgrade libguestfs-javadocUpgrade libvirt-adminUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-benchmarkingUpgrade hivex-develUpgrade libvirt-daemon-driver-storageUpgrade ruby-hivexUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-lxcUpgrade netcf-libsUpgrade supermin-develUpgrade libvirt-daemon-driver-interfaceUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-man-pages-ukUpgrade libguestfs-gfs2Upgrade nbdkit-develUpgrade virt-dibUpgrade seabiosUpgrade python3-libvirtUpgrade seavgabios-binUpgrade netcf-develUpgrade qemu-kvm-commonUpgrade libguestfs-inspect-iconsUpgrade libvirt-clientUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade libvirt-daemon-config-networkUpgrade seabios-binUpgrade libguestfs-toolsUpgrade lua-guestfsUpgrade virt-v2vUpgrade nbdkit-plugin-xz | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade netcf-libsUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-kvmUpgrade hivex-debuginfoUpgrade SLOFUpgrade libguestfs-debugsourceUpgrade libguestfs-java-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-admin-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade seabios-binUpgrade supermin-develUpgrade netcfUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemonUpgrade nbdkit-debuginfoUpgrade virt-dibUpgrade libguestfs-xfsUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-lxcUpgrade ruby-hivexUpgrade perl-hivexUpgrade libvirt-login-shellUpgrade libvirt-clientUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-curl-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade hivex-develUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-xzUpgrade virt-v2vUpgrade libvirt-adminUpgrade libguestfs-inspect-iconsUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-docsUpgrade libvirt-dbusUpgrade libvirt-develUpgrade python3-libvirt-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-nss-debuginfoUpgrade superminUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-Virt-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvmUpgrade libguestfs-man-pages-ukUpgrade lua-guestfsUpgrade qemu-kvm-block-glusterUpgrade libguestfs-toolsUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-libs-debuginfoUpgrade seavgabios-binUpgrade libguestfs-javadocUpgrade nbdkit-example-pluginsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-gfs2Upgrade python3-libvirtUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade virt-p2v-makerUpgrade qemu-kvm-common-debuginfoUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade hivex-debugsourceUpgrade libguestfs-bash-completionUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-debuginfoUpgrade libiscsi-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade netcf-libs-debuginfoUpgrade supermin-debuginfoUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfsUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-gobjectUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-debugsourceUpgrade nbdkit-basic-pluginsUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-lock-sanlockUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-develUpgrade virt-dib-debuginfoUpgrade libiscsiUpgrade netcf-debugsourceUpgrade libguestfs-winsupportUpgrade qemu-img-debuginfoUpgrade libvirt-python-debugsourceUpgrade supermin-debugsourceUpgrade libguestfs-develUpgrade hivexUpgrade netcf-debuginfoUpgrade netcf-develUpgrade nbdkitUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-debuginfoUpgrade libssh2-debuginfoUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-debugsourceUpgrade libguestfs-tools-cUpgrade nbdkit-basic-plugins-debuginfoUpgrade ruby-libguestfsUpgrade libiscsi-utilsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirtUpgrade libguestfs-gobject-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libssh2Upgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade lua-guestfs-debuginfoUpgrade python3-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rsyncUpgrade python3-libguestfs | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-qemuUpgrade libvirt-daemonUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-xenUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-hooksUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-develUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-bash-completionUpgrade libvirt-nssUpgrade libvirt-daemon-lxc | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-clientsUpgrade libvirt-binUpgrade libvirt-daemon | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub