Search CVE reports


Toggle filters

41 – 50 of 99 results


CVE-2015-5160

Low priority
Ignored

libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt
Show less packages

CVE-2018-3639

Medium priority

Some fixes available 69 of 76

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with...

190 affected packages

linux-gke, linux-azure-fde-5.15, linux-nvidia-bos, linux-nvidia-7.0, linux-hwe-7.0...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-gke Not affected Not affected Not affected Not affected Not in release
linux-azure-fde-5.15 Not in release Not in release Not in release Fixed Not in release
linux-nvidia-bos Not affected Not in release Not in release Not in release Not in release
linux-nvidia-7.0 Not in release Not affected Not in release Not in release Not in release
linux-hwe-7.0 Not in release Not affected Not in release Not in release Not in release
linux-oem-7.0 Not affected Not in release Not in release Not in release Not in release
intel-microcode Not affected Not affected Not affected Not affected Fixed
libvirt Fixed Fixed Fixed Fixed Fixed
linux Not affected Not affected Not affected Not affected Fixed
linux-allwinner Not in release Not in release Not in release Not in release Not in release
linux-allwinner-5.19 Not in release Not in release Not affected Not in release Not in release
linux-aws Not affected Not affected Not affected Not affected Fixed
linux-aws-5.0 Not in release Not in release Not in release Not in release Not affected
linux-aws-5.11 Not in release Not in release Not in release Not affected Not in release
linux-aws-5.13 Not in release Not in release Not in release Not affected Not in release
linux-aws-5.15 Not in release Not in release Not in release Not affected Not in release
linux-aws-5.19 Not in release Not in release Not affected Not in release Not in release
linux-aws-5.3 Not in release Not in release Not in release Not in release Not affected
linux-aws-5.4 Not in release Not in release Not in release Not in release Not affected
linux-aws-5.8 Not in release Not in release Not in release Not affected Not in release
linux-aws-6.14 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.17 Not in release Not affected Not in release Not in release Not in release
linux-aws-6.2 Not in release Not in release Not affected Not in release Not in release
linux-aws-6.5 Not in release Not in release Not affected Not in release Not in release
linux-aws-6.8 Not in release Not in release Not affected Not in release Not in release
linux-aws-fips Not in release Not affected Not affected Not affected Not affected
linux-aws-hwe Not in release Not in release Not in release Not in release Not in release
linux-azure Not affected Not affected Not affected Not affected Fixed
linux-azure-4.15 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.11 Not in release Not in release Not in release Not affected Not in release
linux-azure-5.13 Not in release Not in release Not in release Not affected Not in release
linux-azure-5.15 Not in release Not in release Not in release Not affected Not in release
linux-azure-5.19 Not in release Not in release Not affected Not in release Not in release
linux-azure-5.3 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.4 Not in release Not in release Not in release Not in release Not affected
linux-azure-5.8 Not in release Not in release Not in release Not affected Not in release
linux-azure-6.11 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-6.2 Not in release Not in release Not affected Not in release Not in release
linux-azure-6.5 Not in release Not in release Not affected Not in release Not in release
linux-azure-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-edge Not in release Not in release Not in release Not in release Fixed
linux-azure-fde Not affected Not affected Not affected Not affected Not in release
linux-azure-fde-5.19 Not in release Not in release Not affected Not in release Not in release
linux-azure-fde-6.14 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.17 Not in release Not affected Not in release Not in release Not in release
linux-azure-fde-6.2 Not in release Not in release Not affected Not in release Not in release
linux-azure-fde-6.8 Not in release Not in release Not affected Not in release Not in release
linux-azure-fips Not in release Not affected Not affected Not affected Not affected
linux-azure-nvidia Not in release Not affected Not in release Not in release Not in release
linux-azure-nvidia-6.14 Not in release Not affected Not in release Not in release Not in release
linux-bluefield Not in release Not in release Not in release Not affected Not in release
linux-dell300x Not in release Not in release Not in release Not in release Not affected
linux-euclid Not in release Not in release Not in release Not in release Not in release
linux-fips Not in release Not affected Not affected Not affected Not affected
linux-flo Not in release Not in release Not in release Not in release Not in release
linux-gcp Not affected Not affected Not affected Not affected Fixed
linux-gcp-4.15 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.11 Not in release Not in release Not in release Not affected Not in release
linux-gcp-5.13 Not in release Not in release Not in release Not affected Not in release
linux-gcp-5.15 Not in release Not in release Not in release Not affected Not in release
linux-gcp-5.19 Not in release Not in release Not affected Not in release Not in release
linux-gcp-5.3 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.4 Not in release Not in release Not in release Not in release Not affected
linux-gcp-5.8 Not in release Not in release Not in release Not affected Not in release
linux-gcp-6.11 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.14 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.17 Not in release Not affected Not in release Not in release Not in release
linux-gcp-6.2 Not in release Not in release Not affected Not in release Not in release
linux-gcp-6.5 Not in release Not in release Not affected Not in release Not in release
linux-gcp-6.8 Not in release Not in release Not affected Not in release Not in release
linux-gcp-edge Not in release Not in release Not in release Not in release Fixed
linux-gcp-fips Not in release Not affected Not affected Not affected Not affected
linux-gke-4.15 Not in release Not in release Not in release Not in release Not affected
linux-gke-5.0 Not in release Not in release Not in release Not in release Not affected
linux-gke-5.15 Not in release Not in release Not in release Not affected Not in release
linux-gke-5.3 Not in release Not in release Not in release Not in release Not affected
linux-gke-5.4 Not in release Not in release Not in release Not in release Not affected
linux-gkeop Not in release Not affected Not affected Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not in release Not affected Not in release
linux-gkeop-5.4 Not in release Not in release Not in release Not in release Not affected
linux-goldfish Not in release Not in release Not in release Not in release Not in release
linux-grouper Not in release Not in release Not in release Not in release Not in release
linux-hwe Not in release Not in release Not in release Not in release Not affected
linux-hwe-5.11 Not in release Not in release Not in release Not affected Not in release
linux-hwe-5.13 Not in release Not in release Not in release Not affected Not in release
linux-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-hwe-5.19 Not in release Not in release Not affected Not in release Not in release
linux-hwe-5.4 Not in release Not in release Not in release Not in release Not affected
linux-hwe-5.8 Not in release Not in release Not in release Not affected Not in release
linux-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.14 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.17 Not in release Not affected Not in release Not in release Not in release
linux-hwe-6.2 Not in release Not in release Not affected Not in release Not in release
linux-hwe-6.5 Not in release Not in release Not affected Not in release Not in release
linux-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-hwe-edge Not in release Not in release Not in release Not in release Not affected
linux-ibm Not affected Not affected Not affected Not affected Not in release
linux-ibm-5.15 Not in release Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not in release Not affected
linux-ibm-6.8 Not in release Not in release Not affected Not in release Not in release
linux-intel Not in release Not affected Not in release Not in release Not in release
linux-intel-5.13 Not in release Not in release Not in release Not affected Not in release
linux-intel-iot-realtime Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg Not in release Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not in release Not affected Not in release
linux-iot Not in release Not in release Not in release Not affected Not in release
linux-kvm Not in release Not in release Not affected Not affected Fixed
linux-laptop Not in release Not in release Not in release Not in release Not in release
linux-lowlatency Not in release Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-5.19 Not in release Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.11 Not in release Not affected Not in release Not in release Not in release
linux-lowlatency-hwe-6.2 Not in release Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.5 Not in release Not in release Not affected Not in release Not in release
linux-lowlatency-hwe-6.8 Not in release Not in release Not affected Not in release Not in release
linux-lts-trusty Not in release Not in release Not in release Not in release Not in release
linux-lts-utopic Not in release Not in release Not in release Not in release Not in release
linux-lts-vivid Not in release Not in release Not in release Not in release Not in release
linux-lts-wily Not in release Not in release Not in release Not in release Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release Not in release
linux-maguro Not in release Not in release Not in release Not in release Not in release
linux-mako Not in release Not in release Not in release Not in release Not in release
linux-manta Not in release Not in release Not in release Not in release Not in release
linux-nvidia Not affected Not affected Not affected Not in release Not in release
linux-nvidia-6.11 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.17 Not in release Not affected Not in release Not in release Not in release
linux-nvidia-6.2 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-6.5 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-6.8 Not in release Not in release Not affected Not in release Not in release
linux-nvidia-bos-7.0 Not in release Not in release Not in release Not in release Not in release
linux-nvidia-lowlatency Not in release Not affected Not in release Not in release Not in release
linux-nvidia-tegra Not in release Not affected Not affected Not in release Not in release
linux-nvidia-tegra-5.15 Not in release Not in release Not in release Not affected Not in release
linux-nvidia-tegra-igx Not in release Not in release Not affected Not in release Not in release
linux-oem Not in release Not in release Not in release Not in release Fixed
linux-oem-5.10 Not in release Not in release Not in release Not affected Not in release
linux-oem-5.13 Not in release Not in release Not in release Not affected Not in release
linux-oem-5.14 Not in release Not in release Not in release Not affected Not in release
linux-oem-5.17 Not in release Not in release Not affected Not in release Not in release
linux-oem-5.6 Not in release Not in release Not in release Not affected Not in release
linux-oem-6.0 Not in release Not in release Not affected Not in release Not in release
linux-oem-6.1 Not in release Not in release Not affected Not in release Not in release
linux-oem-6.11 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oem-6.5 Not in release Not in release Not affected Not in release Not in release
linux-oem-6.8 Not in release Not affected Not in release Not in release Not in release
linux-oem-osp1 Not in release Not in release Not in release Not in release Not affected
linux-oracle Not affected Not affected Not affected Not affected Not affected
linux-oracle-5.0 Not in release Not in release Not in release Not in release Not affected
linux-oracle-5.11 Not in release Not in release Not in release Not affected Not in release
linux-oracle-5.13 Not in release Not in release Not in release Not affected Not in release
linux-oracle-5.15 Not in release Not in release Not in release Not affected Not in release
linux-oracle-5.3 Not in release Not in release Not in release Not in release Not affected
linux-oracle-5.4 Not in release Not in release Not in release Not in release Not affected
linux-oracle-5.8 Not in release Not in release Not in release Not affected Not in release
linux-oracle-6.14 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.17 Not in release Not affected Not in release Not in release Not in release
linux-oracle-6.5 Not in release Not in release Not affected Not in release Not in release
linux-oracle-6.8 Not in release Not in release Not affected Not in release Not in release
linux-raspi Not affected Not affected Not affected Not affected Not in release
linux-raspi-5.4 Not in release Not in release Not in release Not in release Not affected
linux-raspi-realtime Not in release Not affected Not in release Not in release Not in release
linux-raspi2 Not in release Not in release Not in release Not affected Fixed
linux-raspi2-5.3 Not in release Not in release Not in release Not in release Not affected
linux-realtime Not affected Not affected Not affected Not in release Not in release
linux-realtime-6.14 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.17 Not in release Not affected Not in release Not in release Not in release
linux-realtime-6.8 Not in release Not in release Not affected Not in release Not in release
linux-riscv Not affected Not affected Not affected Not affected Not in release
linux-riscv-5.11 Not in release Not in release Not in release Not affected Not in release
linux-riscv-5.15 Not in release Not in release Not in release Not affected Not in release
linux-riscv-5.19 Not in release Not in release Not affected Not in release Not in release
linux-riscv-5.8 Not in release Not in release Not in release Not affected Not in release
linux-riscv-6.14 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.17 Not in release Not affected Not in release Not in release Not in release
linux-riscv-6.5 Not in release Not in release Not affected Not in release Not in release
linux-riscv-6.8 Not in release Not in release Not affected Not in release Not in release
linux-snapdragon Not in release Not in release Not in release Not in release Fixed
linux-starfive Not in release Not in release Not in release Not in release Not in release
linux-starfive-5.19 Not in release Not in release Not affected Not in release Not in release
linux-starfive-6.2 Not in release Not in release Not affected Not in release Not in release
linux-starfive-6.5 Not in release Not in release Not affected Not in release Not in release
linux-xilinx Not in release Not affected Not in release Not in release Not in release
linux-xilinx-zynqmp Not in release Not in release Not affected Not affected Not in release
qemu Fixed Fixed Fixed Fixed Fixed
qemu-kvm Not in release Not in release Not in release Not in release Not in release
xen Not affected Not affected Not affected Not affected Not affected
Show all 190 packages Show less packages

CVE-2018-1064

Low priority
Fixed

libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEMU guest agent.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt Not affected Fixed
Show less packages

CVE-2018-6764

Low priority
Fixed

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt
Show less packages

CVE-2018-5748

Low priority
Fixed

qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt Not affected Not affected
Show less packages

CVE-2017-5715

High priority

Some fixes available 46 of 56

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

87 affected packages

linux-aws-fips, linux-azure-fips, linux-gcp-fips, amd64-microcode, firefox...

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
linux-aws-fips Not in release Not affected Not affected Not affected
linux-azure-fips Not in release Not affected Not affected Not affected
linux-gcp-fips Not in release Not affected Not affected Not affected
amd64-microcode Not affected Not affected Not affected Fixed
firefox Not affected Not affected Not in release Fixed
intel-microcode Not affected Not affected Not affected Not affected
libvirt Not affected Not affected Not affected Not affected
linux Not affected Not affected Not affected Not affected
linux-aws Not affected Not affected Not affected Not affected
linux-aws-5.15 Not in release Not in release Not affected Not in release
linux-aws-5.4 Not in release Not in release Not in release Not affected
linux-aws-6.8 Not in release Not affected Not in release Not in release
linux-aws-hwe Not in release Not in release Not in release Not in release
linux-azure Not affected Not affected Not affected Not affected
linux-azure-4.15 Not in release Not in release Not in release Not affected
linux-azure-5.15 Not in release Not in release Not affected Not in release
linux-azure-5.4 Not in release Not in release Not in release Not affected
linux-azure-6.8 Not in release Not affected Not in release Not in release
linux-azure-edge Not in release Not in release Not in release Not affected
linux-azure-fde Not affected Not affected Ignored Not in release
linux-azure-fde-5.15 Not in release Not in release Not affected Not in release
linux-bluefield Not in release Not in release Not affected Not in release
linux-euclid Not in release
linux-fips Not in release Not affected Not affected Not affected
linux-flo Not in release
linux-gcp Not affected Not affected Not affected Not affected
linux-gcp-4.15 Not in release Not in release Not in release Not affected
linux-gcp-5.15 Not in release Not in release Not affected Not in release
linux-gcp-5.4 Not in release Not in release Not in release Not affected
linux-gcp-6.8 Not in release Not affected Not in release Not in release
linux-gke Not affected Not affected Ignored Not in release
linux-gkeop Not affected Not affected Not affected Not in release
linux-gkeop-5.15 Not in release Not in release Not affected Not in release
linux-goldfish Not in release
linux-grouper Not in release
linux-hwe Not in release Not in release Not in release Not affected
linux-hwe-5.15 Not in release Not in release Not affected Not in release
linux-hwe-5.4 Not in release Not in release Not in release Not affected
linux-hwe-6.8 Not in release Not affected Not in release Not in release
linux-hwe-edge Not in release Not in release Not in release Not affected
linux-ibm Not affected Not affected Not affected Not in release
linux-ibm-5.15 Not in release Not in release Not affected Not in release
linux-ibm-5.4 Not in release Not in release Not in release Not affected
linux-intel Not affected Not in release Not in release Not in release
linux-intel-iot-realtime Not in release Not affected Not in release Not in release
linux-intel-iotg Not in release Not affected Not in release Not in release
linux-intel-iotg-5.15 Not in release Not in release Not affected Not in release
linux-iot Not in release Not in release Not affected Not in release
linux-kvm Not in release Not affected Not affected Not affected
linux-lowlatency Not affected Not affected Not in release Not in release
linux-lowlatency-hwe-5.15 Not in release Not in release Not affected Not in release
linux-lowlatency-hwe-6.8 Not in release Not affected Not in release Not in release
linux-lts-quantal Not in release
linux-lts-raring Not in release
linux-lts-saucy Not in release
linux-lts-trusty Not in release
linux-lts-utopic Not in release
linux-lts-vivid Not in release
linux-lts-wily Not in release
linux-lts-xenial Not in release Not in release Not in release Not in release
linux-maguro Not in release
linux-mako Not in release
linux-manta Not in release
linux-nvidia Not affected Not affected Not in release Not in release
linux-nvidia-6.5 Not in release Not affected Not in release Not in release
linux-nvidia-6.8 Not in release Not affected Not in release Not in release
linux-nvidia-lowlatency Not affected Not in release Not in release Not in release
linux-oem Not in release Not in release Not in release Not affected
linux-oem-6.11 Not affected Not in release Not in release Not in release
linux-oem-6.8 Not affected Not in release Not in release Not in release
linux-oracle Not affected Not affected Not affected Not affected
linux-oracle-5.15 Not in release Not in release Not affected Not in release
linux-oracle-5.4 Not in release Not in release Not in release Not affected
linux-oracle-6.8 Not in release Not affected Not in release Not in release
linux-raspi Not affected Not affected Not affected Not in release
linux-raspi-5.4 Not in release Not in release Not in release Not affected
linux-raspi-realtime Not affected Not in release Not in release Not in release
linux-raspi2 Not in release Not in release Ignored Not affected
linux-realtime Not affected Not affected Not in release Not in release
linux-riscv Not affected Ignored Ignored Not in release
linux-riscv-5.15 Not in release Not in release Not affected Not in release
linux-riscv-6.8 Not in release Not affected Not in release Not in release
linux-snapdragon Not in release Not in release Not in release Not affected
linux-xilinx-zynqmp Not in release Not affected Not affected Not in release
qemu Not affected Not affected Not affected Fixed
qemu-kvm Not in release
webkit2gtk Not affected Not affected Not affected Not affected
Show all 87 packages Show less packages

CVE-2017-1000256

Low priority

Some fixes available 1 of 2

libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt
Show less packages

CVE-2016-5008

Low priority

Some fixes available 10 of 14

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt Fixed Fixed
Show less packages

CVE-2014-3672

Negligible priority

Some fixes available 2 of 12

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.

4 affected packages

libvirt, qemu, qemu-kvm, xen

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt
qemu
qemu-kvm
xen
Show less packages

CVE-2015-5313

Low priority
Fixed

Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with...

1 affected package

libvirt

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libvirt
Show less packages