| Max CVSS | 7.2 | Min CVSS | 4.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-10161 | 7.2 |
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attac
|
25-03-2021 - 14:09 | 30-07-2019 - 23:15 | |
| CVE-2018-5748 | 5.0 |
qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
|
15-10-2020 - 13:28 | 25-01-2018 - 16:29 | |
| CVE-2019-10161 | 7.2 |
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attac
|
30-09-2020 - 14:47 | 30-07-2019 - 23:15 | |
| CVE-2019-11091 | 4.7 |
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
|
24-08-2020 - 17:37 | 30-05-2019 - 16:29 | |
| CVE-2018-12130 | 4.7 |
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of im
|
11-06-2019 - 16:29 | 30-05-2019 - 16:29 | |
| CVE-2018-12127 | 4.7 |
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impact
|
11-06-2019 - 16:29 | 30-05-2019 - 16:29 | |
| CVE-2018-12126 | 4.7 |
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of
|
11-06-2019 - 16:29 | 30-05-2019 - 16:29 | |
| CVE-2018-1064 | 5.0 |
libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.
|
20-06-2018 - 01:29 | 28-03-2018 - 18:29 |