The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-clientUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-login-shellUpgrade libvirt-lock-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nss | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-block-curlUpgrade libguestfs-gfs2Upgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade netcf-develUpgrade perl-hivexUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-inspect-iconsUpgrade ruby-hivex-debuginfoUpgrade libguestfs-toolsUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbdUpgrade supermin-debuginfoUpgrade libvirt-bash-completionUpgrade libiscsi-utils-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-networkUpgrade qemu-img-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-nss-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade netcf-libs-debuginfoUpgrade libguestfs-bash-completionUpgrade qemu-kvm-core-debuginfoUpgrade virt-v2vUpgrade hivexUpgrade superminUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-rescueUpgrade ruby-libguestfsUpgrade nbdkit-plugin-xz-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-dbus-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-debugsourceUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-nssUpgrade libssh2-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-debugsourceUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade libvirt-daemonUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-develUpgrade libvirtUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade seabiosUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade supermin-debugsourceUpgrade qemu-kvm-coreUpgrade python3-libvirtUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbusUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade netcfUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfsUpgrade netcf-debugsourceUpgrade libvirt-daemon-config-networkUpgrade sgabios-binUpgrade libssh2-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivex-debuginfoUpgrade libiscsi-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-winsupportUpgrade netcf-debuginfoUpgrade libvirt-adminUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-python3Upgrade seabios-binUpgrade qemu-imgUpgrade qemu-kvm-block-rbd-debuginfoUpgrade netcf-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-kvmUpgrade ruby-hivexUpgrade libvirt-daemon-lxcUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade supermin-develUpgrade libguestfs-java-debuginfoUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade libguestfs-debuginfoUpgrade libiscsi-debugsourceUpgrade qemu-kvm-debugsourceUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-debuginfoUpgrade libvirt-python-debugsourceUpgrade qemu-kvmUpgrade virt-p2v-makerUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-develUpgrade libguestfs-java-develUpgrade qemu-kvm-debuginfoUpgrade lua-guestfs-debuginfoUpgrade virt-dibUpgrade libguestfs-gobject-develUpgrade libiscsiUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-gzipUpgrade libssh2Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-develUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-example-pluginsUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-dbus-debugsource | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-bash-completionUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsi | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-gzipUpgrade libssh2Upgrade python3-hivexUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-curlUpgrade perl-Sys-VirtUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-sshUpgrade libiscsiUpgrade python3-libguestfsUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivexUpgrade libguestfs-develUpgrade ruby-libguestfsUpgrade qemu-guest-agentUpgrade libguestfs-javaUpgrade sgabiosUpgrade libguestfs-rsyncUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rescueUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlockUpgrade libguestfs-java-develUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-basic-pluginsUpgrade nbdkitUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-coreUpgrade libvirt-libsUpgrade libguestfs-gobjectUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-cUpgrade nbdkit-bash-completionUpgrade libvirt-dbusUpgrade qemu-kvm-block-rbdUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-lxcUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-toolsUpgrade qemu-kvm-block-glusterUpgrade nbdkit-develUpgrade nbdkit-plugin-python3Upgrade libguestfs-gfs2Upgrade libvirt-daemon-kvmUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-xzUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-ukUpgrade libguestfs-benchmarkingUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade libvirt-docsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-lxcUpgrade ruby-hivexUpgrade netcfUpgrade libguestfsUpgrade libguestfs-javadocUpgrade hivex-develUpgrade qemu-kvmUpgrade libguestfs-gobject-develUpgrade libvirt-adminUpgrade libvirt-develUpgrade seabiosUpgrade supermin-develUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcf-libsUpgrade libiscsi-develUpgrade nbdkit-example-pluginsUpgrade perl-hivexUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-networkUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-secretUpgrade virt-dibUpgrade virt-v2vUpgrade seabios-binUpgrade lua-guestfs | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade ruby-hivexUpgrade qemu-guest-agentUpgrade nbdkit-plugin-xzUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-man-pages-ukUpgrade virt-p2v-makerUpgrade libssh2-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-clientUpgrade seabiosUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-bash-completionUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade hivex-develUpgrade qemu-kvmUpgrade nbdkit-plugin-python3-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade lua-guestfsUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-dbusUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-adminUpgrade python3-libvirt-debuginfoUpgrade seabios-binUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade netcf-libsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-commonUpgrade qemu-kvm-block-curlUpgrade superminUpgrade virt-dibUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-core-debuginfoUpgrade sgabios-binUpgrade libguestfs-inspect-iconsUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-xfsUpgrade nbdkit-example-pluginsUpgrade libvirt-login-shellUpgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade libvirt-docsUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemuUpgrade seavgabios-binUpgrade hivex-debugsourceUpgrade python3-hivex-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-benchmarkingUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-bash-completionUpgrade nbdkit-example-plugins-debuginfoUpgrade virt-v2vUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade hivex-debuginfoUpgrade supermin-develUpgrade SLOFUpgrade perl-hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-kvmUpgrade libiscsi-develUpgrade libguestfs-javaUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-develUpgrade netcfUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-VirtUpgrade libvirt-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfsUpgrade libssh2-debuginfoUpgrade libvirtUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-hivexUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbus-debuginfoUpgrade hivexUpgrade netcf-debugsourceUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-python-debugsourceUpgrade qemu-kvm-block-rbdUpgrade nbdkit-develUpgrade supermin-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsi-utilsUpgrade ruby-hivex-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-network-debuginfoUpgrade netcf-develUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-libsUpgrade qemu-kvm-debugsourceUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-debugsourceUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade qemu-img-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade sgabiosUpgrade perl-Sys-GuestfsUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-lock-sanlockUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-debuginfoUpgrade qemu-imgUpgrade lua-guestfs-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-develUpgrade netcf-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-rescueUpgrade libssh2Upgrade libvirt-daemon-driver-interface-debuginfoUpgrade virt-dib-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-lock-sanlock-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completion | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-adminUpgrade libvirt-develUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-devel-32bitUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemonUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-scsi | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt-daemonUpgrade libvirt-clientsUpgrade libvirt0 | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub