Filter
-Infinity
0

LibVIRTUse After Free

8.8
First published (updated )

LibVIRTlibvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output

8.5
First published (updated )

ubuntu/vipsRace Condition, Null Pointer Dereference

7.5
First published (updated )

LibvirtA flaw was found in the way message freeing on connection cleanup was handled under certain error co…

First published (updated )

LibvirtDaniel P. Berrange reported: "As non-root, simply run: # virsh -c qemu:///system --readonly ifac…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

LibvirtIt was reported that virt-login-shell, an suid-root program, did not sanitize its environment variab…

First published (updated )

LibvirtA part of the returned monitor response was freed twice and caused crashes of the daemon when using …

First published (updated )

ubuntu/vipsDivide by Zero

First published (updated )

ubuntu/vipsPotential segfault due to NULL pointer dereference in libvips

First published (updated )

ubuntu/vipslibvips before 8.7.4 generates output images from uninitialized memory locations when processing cor…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ubuntu/vipsim_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized …

First published (updated )

LibvirtIt has been found that sending crafted RPC command with nparams set to 0 can lead to libvirtd access…

First published (updated )

Red Hat OpenStack Services on OpenShiftThierry Carrez <thierry> reports: Pádraig Brady from Red Hat discovered that the fix implemen…

First published (updated )

LibvirtIt has been found that sending RPC message with an event as the RPC number, or RPC number that falls…

First published (updated )

LibvirtA denial of service flaw was found in the way storage pool manager of libvirt, a C toolkit to intera…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

LibvirtThe 'stats' variable in remoteDispatchDomainMemoryStats function was not initialized to NULL, so if …

First published (updated )

LibvirtIf users haven't configured guest agent then qemuAgentCommand() will dereference a NULL 'mon' pointe…

First published (updated )

LibvirtEric Blake from Red Hat reports that ever since libvirt 1.1.1 added ACL domain:getattr filtering for…

First published (updated )

LibvirtDescription of the problem: Domblkstat is possible even with read-only connection, so whenever migr…

First published (updated )

LibvirtDescription of problem: When several libvirtd threads are reporting errors at the same time, the err…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

LibvirtRegression introduced in commit d6623003 (v0.8.8) - using the wrong sizeof operand meant that securi…

First published (updated )

LibvirtDescription of problem: On my workstation, as a virtual machine host, I have NetworkManager's dnsmas…

First published (updated )

LibvirtJeremy Nickurak reported an issue with how libvirt creates iptables rules when guest systems are set…

First published (updated )

LibvirtA vulnerability was found in libvirt versions >= 4.8.0. An information exposure allows to retriev…

First published (updated )

sandboxing,of upstream programs by distros

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203