The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-lxcUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-nssUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemu | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade libiscsi-develUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-client-debuginfoUpgrade netcf-debuginfoUpgrade netcf-libsUpgrade libguestfs-tools-cUpgrade libguestfs-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-v2v-debuginfoUpgrade libvirt-adminUpgrade libguestfs-javaUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-dbusUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-p2v-makerUpgrade libguestfs-gobjectUpgrade hivex-develUpgrade lua-guestfs-debuginfoUpgrade libvirt-docsUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade supermin-develUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-benchmarkingUpgrade nbdkit-bash-completionUpgrade qemu-kvm-debugsourceUpgrade libguestfs-java-develUpgrade libguestfs-man-pages-ukUpgrade libguestfs-java-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-imgUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-dibUpgrade libiscsiUpgrade nbdkit-debuginfoUpgrade libguestfs-javadocUpgrade libguestfs-tools-c-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libssh2Upgrade libguestfs-debuginfoUpgrade ruby-hivexUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvmUpgrade hivex-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libguestfsUpgrade python3-hivex-debuginfoUpgrade netcfUpgrade perl-Sys-VirtUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade sgabios-binUpgrade seabios-binUpgrade nbdkit-plugin-vddkUpgrade nbdkitUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-lxcUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-commonUpgrade ruby-hivex-debuginfoUpgrade libguestfs-xfsUpgrade python3-libguestfsUpgrade libvirt-admin-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-gobject-debuginfoUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-libsUpgrade nbdkit-basic-plugins-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade netcf-develUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libssh2-debugsourceUpgrade sgabiosUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade virt-dib-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade perl-hivexUpgrade ruby-libguestfs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-bash-completionUpgrade nbdkit-plugin-xzUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade nbdkit-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade hivex-debugsourceUpgrade perl-Sys-GuestfsUpgrade libiscsi-utilsUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-basic-pluginsUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-hivexUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade seavgabios-binUpgrade libvirt-nss-debuginfoUpgrade superminUpgrade libguestfs-rescueUpgrade seabiosUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade supermin-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade lua-guestfsUpgrade libvirt-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade hivexUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade virt-v2vUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-login-shell | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpath | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-winsupportUpgrade netcf-develUpgrade libvirt-daemonUpgrade seabios-binUpgrade lua-guestfsUpgrade libguestfs-gfs2Upgrade virt-p2v-makerUpgrade libguestfs-gobject-develUpgrade qemu-kvmUpgrade libvirt-clientUpgrade hivex-develUpgrade libguestfs-javadocUpgrade libvirt-docsUpgrade qemu-kvm-commonUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfsUpgrade libvirt-adminUpgrade netcfUpgrade ruby-hivexUpgrade libvirt-daemon-kvmUpgrade netcf-libsUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade libguestfs-toolsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-xfsUpgrade nbdkit-plugin-python3Upgrade libvirt-bash-completionUpgrade perl-hivexUpgrade libvirt-daemon-driver-storageUpgrade virt-v2vUpgrade seabiosUpgrade virt-dibUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-login-shellUpgrade libiscsi-develUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-develUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-lxcUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade sgabiosUpgrade libiscsi-utilsUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade python3-libguestfsUpgrade libvirtUpgrade hivexUpgrade libguestfs-rsyncUpgrade libguestfs-java-develUpgrade nbdkit-plugin-vddkUpgrade nbdkitUpgrade libvirt-libsUpgrade qemu-kvm-coreUpgrade libiscsiUpgrade libguestfs-bash-completionUpgrade ruby-libguestfsUpgrade qemu-kvm-block-rbdUpgrade libvirt-dbusUpgrade libguestfs-gobjectUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-gzipUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agentUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libssh2Upgrade libguestfs-develUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completionUpgrade python3-hivexUpgrade libguestfs-rescueUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-qemuUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-python-commonUpgrade qemu-kvm-block-curlUpgrade qemu-img | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade seabios-binUpgrade libvirt-nssUpgrade seabiosUpgrade libguestfs-gobject-develUpgrade sgabios-binUpgrade python3-libvirtUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade libguestfs-javaUpgrade lua-guestfsUpgrade nbdkit-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libguestfs-xfsUpgrade libvirt-libs-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade perl-hivex-debuginfoUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-login-shellUpgrade qemu-kvm-core-debuginfoUpgrade virt-v2vUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade supermin-develUpgrade perl-hivexUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemonUpgrade virt-dibUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-toolsUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade SLOFUpgrade netcf-libsUpgrade libvirt-daemon-debuginfoUpgrade python3-libvirt-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvmUpgrade netcfUpgrade libguestfs-bash-completionUpgrade virt-p2v-makerUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade ruby-libguestfs-debuginfoUpgrade python3-hivex-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade superminUpgrade nbdkit-plugin-xzUpgrade ruby-hivexUpgrade libguestfs-gfs2Upgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lxcUpgrade libiscsi-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-lxcUpgrade hivex-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libguestfs-inspect-iconsUpgrade libvirt-clientUpgrade libvirt-docsUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secretUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-libguestfsUpgrade hivexUpgrade libvirt-debugsourceUpgrade libvirt-debuginfoUpgrade nbdkit-develUpgrade libvirt-client-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-bash-completionUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debugsourceUpgrade libssh2-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-gobjectUpgrade qemu-imgUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-vddkUpgrade nbdkit-debugsourceUpgrade libiscsiUpgrade libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-basic-pluginsUpgrade libiscsi-utilsUpgrade sgabiosUpgrade libguestfs-winsupportUpgrade virt-dib-debuginfoUpgrade netcf-develUpgrade qemu-img-debuginfoUpgrade libvirt-libsUpgrade ruby-hivex-debuginfoUpgrade libguestfs-develUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade supermin-debugsourceUpgrade libssh2Upgrade qemu-kvm-block-sshUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-java-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade lua-guestfs-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-coreUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-debugsource | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade wireshark-plugin-libvirtUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-libxl | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt-clientsUpgrade libvirt0Upgrade libvirt-daemonUpgrade libvirt-bin | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub