| Max CVSS | 4.3 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5313 | 1.9 |
Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not doma
|
13-02-2023 - 00:53 | 11-04-2016 - 21:59 | |
| CVE-2016-5008 | 4.3 |
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.
|
12-02-2023 - 23:22 | 13-07-2016 - 15:59 | |
| CVE-2015-5160 | 2.1 |
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
|
15-10-2020 - 13:28 | 20-08-2018 - 21:29 |