The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docsUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-libsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libvirt-adminUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-gluster | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade nbdkit-basic-plugins-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-libsUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-toolsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvm-commonUpgrade libvirt-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-debugsourceUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-guest-agentUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-xzUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-gfs2Upgrade libvirt-bash-completionUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade virt-v2vUpgrade netcf-libs-debuginfoUpgrade libiscsi-utilsUpgrade nbdkit-debugsourceUpgrade lua-guestfsUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-nss-debuginfoUpgrade perl-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade hivex-debugsourceUpgrade sgabiosUpgrade hivexUpgrade libguestfs-bash-completionUpgrade ruby-libguestfsUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-rescueUpgrade superminUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade supermin-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-common-debuginfoUpgrade seabiosUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemonUpgrade libvirt-login-shellUpgrade virt-dib-debuginfoUpgrade netcf-develUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-hivexUpgrade nbdkit-plugin-python-commonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-admin-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirtUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-inspect-iconsUpgrade ruby-hivex-debuginfoUpgrade libguestfs-javaUpgrade python3-libguestfs-debuginfoUpgrade libiscsiUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-docsUpgrade qemu-kvm-coreUpgrade libvirt-dbusUpgrade libssh2Upgrade nbdkit-debuginfoUpgrade hivex-develUpgrade libiscsi-debugsourceUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-tools-cUpgrade supermin-debugsourceUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkitUpgrade python3-libvirtUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade seabios-binUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-gobjectUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-lxcUpgrade libguestfs-gobject-develUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-plugin-gzipUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-java-develUpgrade python3-libvirt-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-lxcUpgrade libguestfs-develUpgrade libvirt-daemon-config-networkUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-adminUpgrade libvirt-client-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfsUpgrade qemu-kvm-debugsourceUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-mpathUpgrade supermin-develUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-debuginfoUpgrade netcfUpgrade virt-dibUpgrade libvirt-develUpgrade qemu-imgUpgrade libvirt-lock-sanlockUpgrade hivex-debuginfoUpgrade ruby-hivexUpgrade sgabios-binUpgrade libvirt-debugsourceUpgrade libguestfs-winsupportUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-example-plugins | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-bash-completionUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedev | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade libiscsiUpgrade ruby-libguestfsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-plugin-gzipUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbusUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-rbdUpgrade libiscsi-utilsUpgrade libguestfs-gobjectUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabiosUpgrade libguestfs-rsyncUpgrade sgabios-binUpgrade qemu-guest-agentUpgrade libguestfs-javaUpgrade libvirt-daemon-lxcUpgrade qemu-kvm-block-sshUpgrade nbdkitUpgrade libguestfs-develUpgrade libvirtUpgrade nbdkit-basic-pluginsUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-coreUpgrade libssh2Upgrade superminUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade hivexUpgrade nbdkit-plugin-vddkUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade libguestfs-java-develUpgrade libvirt-daemon-qemuUpgrade libguestfs-rescueUpgrade python3-hivexUpgrade perl-Sys-GuestfsUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-develUpgrade hivex-develUpgrade ruby-hivexUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfsUpgrade qemu-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-bash-completionUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade seabiosUpgrade virt-dibUpgrade python3-libvirtUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemonUpgrade qemu-kvm-block-glusterUpgrade virt-v2vUpgrade libvirt-clientUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-toolsUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobject-develUpgrade libvirt-adminUpgrade virt-p2v-makerUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-javadocUpgrade libguestfs-benchmarkingUpgrade lua-guestfsUpgrade netcfUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-qemuUpgrade netcf-libsUpgrade libvirt-nssUpgrade supermin-develUpgrade libiscsi-develUpgrade nbdkit-plugin-python3Upgrade libguestfs-winsupportUpgrade libvirt-login-shellUpgrade perl-hivexUpgrade libvirt-docsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade netcf-devel | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade netcfUpgrade qemu-kvm-block-curlUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade seabios-binUpgrade python3-libguestfs-debuginfoUpgrade supermin-develUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-develUpgrade libvirt-bash-completionUpgrade libvirt-adminUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-kvmUpgrade perl-hivexUpgrade libvirt-daemonUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade virt-dibUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-daemon-lxcUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-nwfilterUpgrade hivex-debugsourceUpgrade netcf-libsUpgrade libvirt-docsUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-xfsUpgrade libguestfs-debugsourceUpgrade perl-Sys-Virt-debugsourceUpgrade seavgabios-binUpgrade ruby-hivexUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-javadocUpgrade python3-libvirtUpgrade SLOFUpgrade python3-hivex-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade qemu-kvmUpgrade lua-guestfsUpgrade libvirt-dbusUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade superminUpgrade qemu-kvm-common-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-bash-completionUpgrade libguestfs-javaUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-gfs2Upgrade hivex-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-gobject-develUpgrade perl-Sys-VirtUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade seabiosUpgrade libiscsi-develUpgrade hivex-develUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade sgabios-binUpgrade libiscsi-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-man-pages-ukUpgrade nbdkit-plugin-xz-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-debuginfoUpgrade nbdkit-example-pluginsUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade libguestfs-toolsUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-java-debuginfoUpgrade libssh2-debugsourceUpgrade qemu-kvm-commonUpgrade libguestfs-gobject-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-lock-sanlockUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbdUpgrade libguestfs-rsyncUpgrade libvirt-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-winsupportUpgrade libiscsi-utils-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade netcf-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-develUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gobjectUpgrade virt-v2v-debuginfoUpgrade supermin-debugsourceUpgrade virt-dib-debuginfoUpgrade netcf-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libssh2Upgrade sgabiosUpgrade nbdkitUpgrade ruby-libguestfsUpgrade python3-hivexUpgrade libiscsiUpgrade libssh2-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-libsUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-mpathUpgrade supermin-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirtUpgrade libguestfs-java-develUpgrade libvirt-debugsourceUpgrade libvirt-python-debugsourceUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-develUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-man-pages-jaUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-plugin-vddkUpgrade libiscsi-utilsUpgrade libguestfs-tools-cUpgrade qemu-imgUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade netcf-libs-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-block-sshUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-nodedevUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-qemuUpgrade libvirtUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-hooksUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-adminUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-nssUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-qemu | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-clientsUpgrade libvirt-binUpgrade libvirt-daemon | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub