The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirt-login-shellUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-bash-completionUpgrade libvirt-daemonUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-admin | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade perl-hivexUpgrade perl-hivex-debuginfoUpgrade hivexUpgrade qemu-kvm-block-sshUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-glusterUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-debuginfoUpgrade lua-guestfsUpgrade hivex-debugsourceUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade netcf-develUpgrade nbdkit-basic-pluginsUpgrade python3-libguestfsUpgrade libvirt-nssUpgrade superminUpgrade nbdkit-plugin-xzUpgrade libvirt-nss-debuginfoUpgrade python3-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-libsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-toolsUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-inspect-iconsUpgrade seabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-debugsourceUpgrade nbdkit-develUpgrade qemu-kvm-block-curlUpgrade libvirt-daemonUpgrade libvirt-login-shellUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-clientUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcf-libs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-gfs2Upgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade virt-v2vUpgrade ruby-libguestfsUpgrade libvirtUpgrade libguestfs-rescueUpgrade seavgabios-binUpgrade qemu-img-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemuUpgrade sgabiosUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-bash-completionUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-client-debuginfoUpgrade netcf-libsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-kvmUpgrade ruby-hivexUpgrade libssh2Upgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-lxcUpgrade netcf-debugsourceUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-imgUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-gluster-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade nbdkit-plugin-vddkUpgrade seabios-binUpgrade libguestfsUpgrade hivex-debuginfoUpgrade libvirt-develUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-dbus-debugsourceUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-man-pages-jaUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvmUpgrade libguestfs-gobject-develUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libvirt-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-dbusUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade supermin-debugsourceUpgrade libguestfs-tools-cUpgrade libguestfs-debuginfoUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-debugsourceUpgrade libguestfs-man-pages-ukUpgrade virt-p2v-makerUpgrade libguestfs-java-develUpgrade libvirt-python-debugsourceUpgrade libguestfs-benchmarkingUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-lxcUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-VirtUpgrade qemu-kvm-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-coreUpgrade libssh2-debuginfoUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-rsyncUpgrade virt-v2v-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libiscsiUpgrade hivex-develUpgrade libvirt-daemon-config-nwfilterUpgrade netcfUpgrade python3-hivex-debuginfoUpgrade nbdkit-example-pluginsUpgrade virt-dibUpgrade libvirt-debugsource | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvm | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-plugin-gzipUpgrade ruby-libguestfsUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python-commonUpgrade libssh2Upgrade libguestfs-rescueUpgrade libvirtUpgrade python3-libguestfsUpgrade superminUpgrade sgabiosUpgrade libguestfs-java-develUpgrade libvirt-lock-sanlockUpgrade perl-Sys-VirtUpgrade hivexUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade libvirt-daemon-qemuUpgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade qemu-guest-agentUpgrade libiscsiUpgrade libiscsi-utilsUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade nbdkit-basic-pluginsUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-coreUpgrade nbdkitUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-lxcUpgrade libguestfs-bash-completionUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-iscsiUpgrade sgabios-binUpgrade libvirt-dbusUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-sshUpgrade libguestfs-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-develUpgrade seavgabios-binUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-docsUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade libvirt-daemon-driver-lxcUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade libguestfs-gobject-develUpgrade hivex-develUpgrade ruby-hivexUpgrade libvirt-bash-completionUpgrade qemu-kvmUpgrade libguestfs-benchmarkingUpgrade netcfUpgrade virt-dibUpgrade libguestfsUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade python3-libvirtUpgrade seabiosUpgrade nbdkit-example-pluginsUpgrade perl-hivexUpgrade libguestfs-gfs2Upgrade virt-p2v-makerUpgrade libvirt-clientUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-develUpgrade nbdkit-plugin-python3Upgrade lua-guestfsUpgrade virt-v2vUpgrade seabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-toolsUpgrade libguestfs-inspect-iconsUpgrade netcf-libsUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-man-pages-ukUpgrade libguestfs-winsupportUpgrade libguestfs-xfsUpgrade libvirt-daemonUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-interface | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade hivex-debuginfoUpgrade libvirt-docsUpgrade libguestfs-toolsUpgrade libiscsi-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade virt-p2v-makerUpgrade ruby-hivexUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-kvmUpgrade libguestfs-man-pages-ukUpgrade libssh2-debugsourceUpgrade perl-hivex-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivex-develUpgrade libvirt-nssUpgrade seavgabios-binUpgrade hivex-debugsourceUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade netcf-libsUpgrade qemu-kvm-commonUpgrade sgabios-binUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-example-pluginsUpgrade libvirt-libs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-debugsourceUpgrade superminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade perl-hivexUpgrade virt-dibUpgrade libvirt-adminUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-develUpgrade libguestfs-javaUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-login-shellUpgrade virt-v2vUpgrade libvirt-daemon-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-qemuUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade SLOFUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemonUpgrade nbdkit-plugin-python3Upgrade perl-Sys-VirtUpgrade seabios-binUpgrade libvirt-admin-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade netcfUpgrade qemu-kvm-block-curlUpgrade libguestfs-gobject-develUpgrade nbdkit-example-plugins-debuginfoUpgrade supermin-develUpgrade nbdkit-plugin-xzUpgrade seabiosUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-gfs2Upgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-guest-agentUpgrade libiscsi-develUpgrade libvirt-daemon-config-networkUpgrade libguestfs-bash-completionUpgrade qemu-kvm-common-debuginfoUpgrade netcf-debugsourceUpgrade netcf-debuginfoUpgrade libiscsi-utilsUpgrade hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rescueUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade libiscsi-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-debugsourceUpgrade libvirt-debuginfoUpgrade lua-guestfs-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-develUpgrade python3-libguestfsUpgrade libvirtUpgrade libguestfs-tools-cUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-libs-debuginfoUpgrade qemu-imgUpgrade libvirt-lock-sanlockUpgrade libssh2Upgrade nbdkitUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade sgabiosUpgrade supermin-debugsourceUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-debugsourceUpgrade libguestfs-winsupportUpgrade perl-Sys-GuestfsUpgrade libguestfs-man-pages-jaUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-debugsourceUpgrade libvirt-libsUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-img-debuginfoUpgrade libssh2-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-develUpgrade libvirt-client-debuginfoUpgrade ruby-libguestfsUpgrade ruby-hivex-debuginfoUpgrade libguestfsUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-java-develUpgrade libiscsi-utils-debuginfoUpgrade netcf-develUpgrade virt-dib-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade nbdkit-plugin-gzipUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libiscsiUpgrade libvirt-python-debugsourceUpgrade nbdkit-plugin-vddk-debuginfo | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-hooksUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-coreUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirtUpgrade libvirt-daemon-qemuUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libs | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-clientsUpgrade libvirt-binUpgrade libvirt-daemon | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub