libvirt-client

Direct Vulnerabilities

Known vulnerabilities in the libvirt-client package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CRLF Injection	*
M Incorrect Default Permissions	*
M Allocation of Resources Without Limits or Throttling	*
M Return of Stack Variable Address	*
M Uncontrolled Memory Allocation	*
M NULL Pointer Dereference	*
M Off-by-one Error	*
M Memory Leak	*
L Improper Access Control	*
L Improper Locking	*
L Use After Free	*
M CVE-2014-8135	*
H Covert Timing Channel	<0:0.10.2-62.el6_9.2
L Resource Exhaustion	<0:0.10.2-64.el6
L Resource Exhaustion	<0:0.10.2-64.el6
M Race Condition	<0:0.10.2-29.el6_5.3
H Out-of-Bounds	<0:0.10.2-18.el6_4.14
H Access Restriction Bypass	<0:0.10.2-18.el6_4.14
M Resource Management Errors	<0:0.10.2-18.el6_4.5
M Improper Input Validation	<0:0.10.2-18.el6
H Use After Free	<0:0.9.10-21.el6_3.8
M CVE-2012-4423	<0:0.9.10-21.el6_3.5
M Resource Management Errors	<0:0.9.10-21.el6_3.4
L Access Restriction Bypass	<0:0.9.10-21.el6
M Integer Overflow or Wraparound	<0:0.8.7-18.el6_1.1
H Access Restriction Bypass	<0:0.8.1-27.el6_0.5
M Resource Management Errors	<0:0.8.1-27.el6_0.6
L Insufficient Granularity of Access Control	*
L Access Restriction Bypass	*
M Credentials Management	<0:0.10.2-46.el6_6.2
M Improper Input Validation	<0:0.10.2-46.el6_6.2
M Out-of-bounds Read	<0:0.10.2-46.el6_6.2
M CVE-2013-7336	<0:0.10.2-29.el6
M XML External Entity (XXE) Injection	<0:0.10.2-29.el6_5.8
M Resource Exhaustion	*
M Improper Access Control	<0:0.10.2-64.el6_10.2
H Covert Storage Channel	<0:0.10.2-64.el6_10.1
H Information Exposure	<0:0.10.2-64.el6_10.1
H Covert Timing Channel	<0:0.10.2-64.el6_10.1
H Covert Storage Channel	<0:0.10.2-64.el6_10.1
L Incorrect Permission Assignment for Critical Resource	*
L Improper Certificate Validation	*
M Improper Access Control	*
M Directory Traversal	*
M Information Exposure	*
M XML External Entity (XXE) Injection	*
M CVE-2011-2178	*
M Race Condition	<0:0.10.2-29.el6_5.3

Vulnerability

Vulnerable Version

CRLF Injection