The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 2, 2019 | Aug 2, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libvirtUpgrade libvirt-debuginfoUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-docsUpgrade libvirt-bash-completionUpgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secret | Apr 27, 2020 | Aug 2, 2019 |
| Centos_linux | — | Upgrade sgabios-binUpgrade libguestfs-man-pages-ukUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-man-pages-jaUpgrade netcfUpgrade libguestfsUpgrade libssh2Upgrade libguestfs-java-debuginfoUpgrade nbdkit-bash-completionUpgrade libguestfs-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-lxcUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-java-develUpgrade nbdkit-plugin-gzipUpgrade netcf-libsUpgrade libvirt-docsUpgrade netcf-debuginfoUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-gobject-develUpgrade qemu-imgUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-client-debuginfoUpgrade supermin-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade seabios-binUpgrade libguestfs-rsyncUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-daemon-kvmUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-debugsourceUpgrade libguestfs-develUpgrade hivex-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-develUpgrade virt-p2v-makerUpgrade libguestfs-gobjectUpgrade libguestfs-benchmarkingUpgrade libvirt-python-debugsourceUpgrade libvirt-develUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvmUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-example-pluginsUpgrade ruby-hivexUpgrade virt-dibUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-lock-sanlockUpgrade supermin-debugsourceUpgrade qemu-kvm-block-iscsiUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-tools-cUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-v2v-debuginfoUpgrade python3-libvirtUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-javadocUpgrade python3-hivex-debuginfoUpgrade nbdkitUpgrade perl-Sys-VirtUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-plugin-vddkUpgrade virt-dib-debuginfoUpgrade libiscsi-utilsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-login-shellUpgrade qemu-guest-agentUpgrade libvirt-daemonUpgrade libvirt-dbus-debuginfoUpgrade libssh2-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-develUpgrade perl-Sys-Virt-debuginfoUpgrade python3-hivexUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-clientUpgrade libguestfs-rescueUpgrade seabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade perl-hivex-debuginfoUpgrade libguestfs-inspect-iconsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-toolsUpgrade qemu-kvm-block-curlUpgrade libvirt-admin-debuginfoUpgrade virt-v2vUpgrade sgabiosUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-utils-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-sshUpgrade libguestfs-debugsourceUpgrade libvirt-libsUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libguestfsUpgrade qemu-img-debuginfoUpgrade libguestfs-bash-completionUpgrade superminUpgrade libvirt-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade ruby-libguestfsUpgrade qemu-kvm-core-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade netcf-libs-debuginfoUpgrade hivex-debugsourceUpgrade perl-Sys-GuestfsUpgrade netcf-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade hivexUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade seavgabios-binUpgrade perl-Sys-Virt-debugsourceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade perl-hivex | Jun 21, 2019 | Jun 20, 2019 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 2, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Mar 16, 2020 | Aug 2, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvm | Jul 26, 2019 | Jun 20, 2019 |
| Oracle_linux | — | Upgrade libvirt-nssUpgrade libvirt-docsUpgrade libvirt-daemonUpgrade qemu-kvmUpgrade libguestfs-benchmarkingUpgrade ruby-hivexUpgrade lua-guestfsUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade libguestfsUpgrade libguestfs-gfs2Upgrade supermin-develUpgrade hivex-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-commonUpgrade libguestfs-javadocUpgrade libvirt-login-shellUpgrade nbdkit-develUpgrade netcf-develUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-libsUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-glusterUpgrade libvirt-bash-completionUpgrade libvirt-clientUpgrade netcfUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-xfsUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade seavgabios-binUpgrade libvirt-adminUpgrade libguestfs-gobject-develUpgrade seabios-binUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade perl-hivexUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-xzUpgrade libguestfs-winsupportUpgrade seabiosUpgrade libiscsi-develUpgrade virt-dibUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-java-develUpgrade libvirtUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python-commonUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbusUpgrade qemu-kvm-block-rbdUpgrade libguestfs-tools-cUpgrade libguestfs-bash-completionUpgrade libguestfs-gobjectUpgrade nbdkitUpgrade qemu-kvm-coreUpgrade nbdkit-plugin-vddkUpgrade nbdkit-basic-pluginsUpgrade libvirt-libsUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-mpathUpgrade python3-hivexUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agentUpgrade libssh2Upgrade libvirt-daemon-qemuUpgrade perl-Sys-VirtUpgrade sgabiosUpgrade hivexUpgrade python3-libguestfsUpgrade libiscsi-utilsUpgrade qemu-imgUpgrade libguestfs-rsyncUpgrade ruby-libguestfsUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completionUpgrade superminUpgrade libvirt-daemon-driver-storage-scsi | Jun 23, 2019 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade libvirt-daemonUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade hivex-debugsourceUpgrade libguestfs-gobject-develUpgrade netcf-libsUpgrade python3-libvirtUpgrade lua-guestfsUpgrade libguestfs-java-debuginfoUpgrade libvirt-admin-debuginfoUpgrade nbdkit-example-pluginsUpgrade libiscsi-develUpgrade nbdkit-plugin-gzip-debuginfoUpgrade supermin-develUpgrade virt-v2vUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-bash-completionUpgrade virt-dibUpgrade libguestfs-javaUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade sgabios-binUpgrade libguestfs-debugsourceUpgrade python3-hivex-debuginfoUpgrade seavgabios-binUpgrade superminUpgrade qemu-kvm-block-glusterUpgrade libguestfs-inspect-iconsUpgrade libvirt-nssUpgrade hivex-debuginfoUpgrade libvirt-docsUpgrade ruby-libguestfs-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade nbdkit-plugin-python3Upgrade python3-libguestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-dbusUpgrade libvirt-daemon-lxcUpgrade netcfUpgrade libvirt-adminUpgrade libguestfs-xfsUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-libs-debuginfoUpgrade perl-hivexUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade SLOFUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade hivex-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-lxcUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-toolsUpgrade libssh2-debugsourceUpgrade qemu-kvm-block-curlUpgrade perl-Sys-Virt-debugsourceUpgrade seabios-binUpgrade libguestfs-javadocUpgrade libvirt-nss-debuginfoUpgrade ruby-hivexUpgrade qemu-kvm-common-debuginfoUpgrade seabiosUpgrade libvirt-daemon-config-networkUpgrade virt-p2v-makerUpgrade libguestfs-benchmarkingUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-guest-agentUpgrade libguestfs-gfs2Upgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkitUpgrade ruby-libguestfsUpgrade libvirt-client-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-man-pages-jaUpgrade netcf-libs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-lock-sanlock-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade virt-dib-debuginfoUpgrade supermin-debugsourceUpgrade ruby-hivex-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade lua-guestfs-debuginfoUpgrade python3-libguestfsUpgrade libvirt-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade python3-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-pluginsUpgrade supermin-debuginfoUpgrade libguestfs-rsyncUpgrade nbdkit-bash-completionUpgrade qemu-imgUpgrade libssh2Upgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-python-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libiscsiUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade sgabiosUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobjectUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbus-debuginfoUpgrade hivexUpgrade libguestfs-rescueUpgrade nbdkit-plugin-gzipUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-develUpgrade nbdkit-plugin-vddkUpgrade libguestfsUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade libssh2-debuginfoUpgrade qemu-img-debuginfoUpgrade nbdkit-debugsourceUpgrade libguestfs-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-java-develUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfo | Jun 21, 2019 | Jun 20, 2019 |
| Suse | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-libsUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-adminUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-hooksUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-devel-32bitUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-lxc | Jul 21, 2019 | Jun 20, 2019 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt-daemonUpgrade libvirt0Upgrade libvirt-clients | Jul 9, 2019 | Jun 20, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub