usn-8652-1
Vulnerability from osv_ubuntu
Published
2026-08-19 16:56
Modified
2026-08-19 16:56
Summary
libvirt vulnerabilities
Details

It was discovered that libvirt incorrectly handled guest reboots in the libxl driver. An attacker in a guest could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)

Alexander Kuznetsov discovered that libvirt incorrectly handled listing network interfaces. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-1441)

It was discovered that libvirt incorrectly handled certain values in its RPC library. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-2494)

It was discovered that libvirt incorrectly handled listing network interfaces under certain circumstances. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2024-2496)

It was discovered that libvirt incorrectly set permissions on external inactive snapshots, making them world-readable. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-13193)

It was discovered that libvirt incorrectly handled certain characters in virtual network definitions. An authenticated user could possibly use this issue to inject arbitrary configuration directives and execute arbitrary code as root. This issue did not affect Ubuntu 14.04 LTS. (CVE-2026-61477)

It was discovered that libvirt incorrectly handled certain XML input. An attacker could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. (CVE-2026-61478)

He Wei discovered that libvirt incorrectly followed symbolic links when changing file ownership. A local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)

It was discovered that libvirt incorrectly set permissions on images during storage volume clone and convert operations, making them temporarily world-readable. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-63623)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-1441",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2494",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2496",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-13193",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libvirt-bin",
            "binary_version": "1.2.2-0ubuntu13.1.28+esm2"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "1.2.2-0ubuntu13.1.28+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@1.2.2-0ubuntu13.1.28+esm2?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.2-0ubuntu13.1.28+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.1.1-0ubuntu8",
        "1.1.1-0ubuntu9",
        "1.1.4-0ubuntu2",
        "1.1.4-0ubuntu3",
        "1.1.4-0ubuntu4",
        "1.1.4-0ubuntu5",
        "1.2.0-0ubuntu1",
        "1.2.0-0ubuntu2",
        "1.2.0-0ubuntu3",
        "1.2.1-0ubuntu1",
        "1.2.1-0ubuntu2",
        "1.2.1-0ubuntu3",
        "1.2.1-0ubuntu4",
        "1.2.1-0ubuntu5",
        "1.2.1-0ubuntu7",
        "1.2.1-0ubuntu8",
        "1.2.1-0ubuntu9",
        "1.2.1-0ubuntu10",
        "1.2.2-0ubuntu1",
        "1.2.2-0ubuntu2",
        "1.2.2-0ubuntu3",
        "1.2.2-0ubuntu4",
        "1.2.2-0ubuntu5",
        "1.2.2-0ubuntu6",
        "1.2.2-0ubuntu7",
        "1.2.2-0ubuntu8",
        "1.2.2-0ubuntu9",
        "1.2.2-0ubuntu10",
        "1.2.2-0ubuntu11",
        "1.2.2-0ubuntu12",
        "1.2.2-0ubuntu13",
        "1.2.2-0ubuntu13.1",
        "1.2.2-0ubuntu13.1.1",
        "1.2.2-0ubuntu13.1.2",
        "1.2.2-0ubuntu13.1.4",
        "1.2.2-0ubuntu13.1.5",
        "1.2.2-0ubuntu13.1.6",
        "1.2.2-0ubuntu13.1.7",
        "1.2.2-0ubuntu13.1.8",
        "1.2.2-0ubuntu13.1.9",
        "1.2.2-0ubuntu13.1.10",
        "1.2.2-0ubuntu13.1.12",
        "1.2.2-0ubuntu13.1.14",
        "1.2.2-0ubuntu13.1.16",
        "1.2.2-0ubuntu13.1.17",
        "1.2.2-0ubuntu13.1.20",
        "1.2.2-0ubuntu13.1.21",
        "1.2.2-0ubuntu13.1.22",
        "1.2.2-0ubuntu13.1.23",
        "1.2.2-0ubuntu13.1.25",
        "1.2.2-0ubuntu13.1.26",
        "1.2.2-0ubuntu13.1.27",
        "1.2.2-0ubuntu13.1.28",
        "1.2.2-0ubuntu13.1.28+esm1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-4147",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-1441",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2494",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2496",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-13193",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libvirt-bin",
            "binary_version": "1.3.1-1ubuntu10.31+esm1"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "1.3.1-1ubuntu10.31+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@1.3.1-1ubuntu10.31+esm1?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.3.1-1ubuntu10.31+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.2.16-2ubuntu11",
        "1.2.16-2ubuntu12",
        "1.2.16-2ubuntu13",
        "1.2.16-2ubuntu14",
        "1.2.21-2ubuntu1",
        "1.2.21-2ubuntu3",
        "1.2.21-2ubuntu4",
        "1.2.21-2ubuntu5",
        "1.2.21-2ubuntu7",
        "1.2.21-2ubuntu8",
        "1.2.21-2ubuntu9",
        "1.2.21-2ubuntu10",
        "1.3.1-1ubuntu1",
        "1.3.1-1ubuntu2",
        "1.3.1-1ubuntu3",
        "1.3.1-1ubuntu4",
        "1.3.1-1ubuntu6",
        "1.3.1-1ubuntu9",
        "1.3.1-1ubuntu10",
        "1.3.1-1ubuntu10.1",
        "1.3.1-1ubuntu10.2",
        "1.3.1-1ubuntu10.3",
        "1.3.1-1ubuntu10.5",
        "1.3.1-1ubuntu10.6",
        "1.3.1-1ubuntu10.7",
        "1.3.1-1ubuntu10.8",
        "1.3.1-1ubuntu10.10",
        "1.3.1-1ubuntu10.11",
        "1.3.1-1ubuntu10.12",
        "1.3.1-1ubuntu10.13",
        "1.3.1-1ubuntu10.14",
        "1.3.1-1ubuntu10.15",
        "1.3.1-1ubuntu10.17",
        "1.3.1-1ubuntu10.18",
        "1.3.1-1ubuntu10.19",
        "1.3.1-1ubuntu10.21",
        "1.3.1-1ubuntu10.22",
        "1.3.1-1ubuntu10.23",
        "1.3.1-1ubuntu10.24",
        "1.3.1-1ubuntu10.25",
        "1.3.1-1ubuntu10.26",
        "1.3.1-1ubuntu10.27",
        "1.3.1-1ubuntu10.29",
        "1.3.1-1ubuntu10.30",
        "1.3.1-1ubuntu10.31"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2024-1441",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2494",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-2496",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-13193",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libnss-libvirt",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-bin",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-clients",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-gluster",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-rbd",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-sheepdog",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-zfs",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-daemon-system",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-sanlock",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt-wireshark",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "4.0.0-1ubuntu8.21+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@4.0.0-1ubuntu8.21+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.0-1ubuntu8.21+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "3.6.0-1ubuntu5",
        "3.6.0-1ubuntu6",
        "4.0.0-1ubuntu1",
        "4.0.0-1ubuntu2",
        "4.0.0-1ubuntu3",
        "4.0.0-1ubuntu4",
        "4.0.0-1ubuntu5",
        "4.0.0-1ubuntu6",
        "4.0.0-1ubuntu7",
        "4.0.0-1ubuntu8",
        "4.0.0-1ubuntu8.1",
        "4.0.0-1ubuntu8.2",
        "4.0.0-1ubuntu8.3",
        "4.0.0-1ubuntu8.4",
        "4.0.0-1ubuntu8.5",
        "4.0.0-1ubuntu8.6",
        "4.0.0-1ubuntu8.7",
        "4.0.0-1ubuntu8.8",
        "4.0.0-1ubuntu8.9",
        "4.0.0-1ubuntu8.10",
        "4.0.0-1ubuntu8.11",
        "4.0.0-1ubuntu8.12",
        "4.0.0-1ubuntu8.13",
        "4.0.0-1ubuntu8.14",
        "4.0.0-1ubuntu8.15",
        "4.0.0-1ubuntu8.16",
        "4.0.0-1ubuntu8.17",
        "4.0.0-1ubuntu8.19",
        "4.0.0-1ubuntu8.20",
        "4.0.0-1ubuntu8.21"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-13193",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63622",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "libnss-libvirt",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-clients",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-lxc",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-qemu",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-gluster",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-rbd",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-zfs",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-vbox",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-driver-xen",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-system",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-system-systemd",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-daemon-system-sysv",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-sanlock",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt-wireshark",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "6.0.0-0ubuntu8.20+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@6.0.0-0ubuntu8.20+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-0ubuntu8.20+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0-0ubuntu5",
        "6.0.0-0ubuntu1",
        "6.0.0-0ubuntu2",
        "6.0.0-0ubuntu3",
        "6.0.0-0ubuntu4",
        "6.0.0-0ubuntu5",
        "6.0.0-0ubuntu6",
        "6.0.0-0ubuntu7",
        "6.0.0-0ubuntu8",
        "6.0.0-0ubuntu8.1",
        "6.0.0-0ubuntu8.2",
        "6.0.0-0ubuntu8.3",
        "6.0.0-0ubuntu8.4",
        "6.0.0-0ubuntu8.5",
        "6.0.0-0ubuntu8.7",
        "6.0.0-0ubuntu8.8",
        "6.0.0-0ubuntu8.9",
        "6.0.0-0ubuntu8.10",
        "6.0.0-0ubuntu8.11",
        "6.0.0-0ubuntu8.12",
        "6.0.0-0ubuntu8.13",
        "6.0.0-0ubuntu8.14",
        "6.0.0-0ubuntu8.15",
        "6.0.0-0ubuntu8.16",
        "6.0.0-0ubuntu8.19",
        "6.0.0-0ubuntu8.20"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63622",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libnss-libvirt",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-clients",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-config-network",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-config-nwfilter",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-lxc",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-qemu",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-gluster",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-rbd",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-zfs",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-vbox",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-driver-xen",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-system",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-system-systemd",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-daemon-system-sysv",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-login-shell",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-sanlock",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt-wireshark",
            "binary_version": "8.0.0-1ubuntu7.19"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "8.0.0-1ubuntu7.19"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@8.0.0-1ubuntu7.19?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.0-1ubuntu7.19"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "7.6.0-0ubuntu1",
        "7.6.0-0ubuntu3",
        "8.0.0-1ubuntu3",
        "8.0.0-1ubuntu4",
        "8.0.0-1ubuntu5",
        "8.0.0-1ubuntu6",
        "8.0.0-1ubuntu7",
        "8.0.0-1ubuntu7.1",
        "8.0.0-1ubuntu7.2",
        "8.0.0-1ubuntu7.3",
        "8.0.0-1ubuntu7.4",
        "8.0.0-1ubuntu7.5",
        "8.0.0-1ubuntu7.6",
        "8.0.0-1ubuntu7.7",
        "8.0.0-1ubuntu7.8",
        "8.0.0-1ubuntu7.9",
        "8.0.0-1ubuntu7.10",
        "8.0.0-1ubuntu7.11",
        "8.0.0-1ubuntu7.12",
        "8.0.0-1ubuntu7.13",
        "8.0.0-1ubuntu7.14",
        "8.0.0-1ubuntu7.15",
        "8.0.0-1ubuntu7.16",
        "8.0.0-1ubuntu7.17",
        "8.0.0-1ubuntu7.18"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63622",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libnss-libvirt",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-clients",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-clients-qemu",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-config-network",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-config-nwfilter",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-lxc",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-qemu",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-gluster",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-rbd",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-zfs",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-vbox",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-driver-xen",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-system",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-system-systemd",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-daemon-system-sysv",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-l10n",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-login-shell",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-sanlock",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt-wireshark",
            "binary_version": "10.0.0-2ubuntu8.16"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "10.0.0-2ubuntu8.16"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@10.0.0-2ubuntu8.16?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "10.0.0-2ubuntu8.16"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "9.6.0-1ubuntu1",
        "9.6.0-1ubuntu2",
        "10.0.0-1ubuntu1",
        "10.0.0-2ubuntu1",
        "10.0.0-2ubuntu5",
        "10.0.0-2ubuntu7",
        "10.0.0-2ubuntu8",
        "10.0.0-2ubuntu8.1",
        "10.0.0-2ubuntu8.2",
        "10.0.0-2ubuntu8.3",
        "10.0.0-2ubuntu8.4",
        "10.0.0-2ubuntu8.5",
        "10.0.0-2ubuntu8.6",
        "10.0.0-2ubuntu8.7",
        "10.0.0-2ubuntu8.8",
        "10.0.0-2ubuntu8.9",
        "10.0.0-2ubuntu8.10",
        "10.0.0-2ubuntu8.11",
        "10.0.0-2ubuntu8.12",
        "10.0.0-2ubuntu8.13",
        "10.0.0-2ubuntu8.14",
        "10.0.0-2ubuntu8.15"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-61477",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-61478",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63622",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-63623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libnss-libvirt",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-clients",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-clients-qemu",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-common",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-common",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-config-network",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-config-nwfilter",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-interface",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-lxc",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-network",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-nodedev",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-nwfilter",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-qemu",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-secret",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-disk",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-gluster",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-iscsi",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-iscsi-direct",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-logical",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-mpath",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-rbd",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-scsi",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-storage-zfs",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-vbox",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-driver-xen",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-lock",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-log",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-plugin-lockd",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-plugin-sanlock",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-system",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-system-systemd",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-daemon-system-sysv",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-l10n",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-login-shell",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-sanlock",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-ssh-proxy",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt-wireshark",
            "binary_version": "12.0.0-1ubuntu5.3"
          },
          {
            "binary_name": "libvirt0",
            "binary_version": "12.0.0-1ubuntu5.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "libvirt",
        "purl": "pkg:deb/ubuntu/libvirt@12.0.0-1ubuntu5.3?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.0.0-1ubuntu5.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "11.6.0-1ubuntu3",
        "11.6.0-1ubuntu5",
        "11.6.0-1ubuntu6",
        "11.6.0-1ubuntu7",
        "11.6.0-1ubuntu8",
        "12.0.0-1ubuntu3",
        "12.0.0-1ubuntu5",
        "12.0.0-1ubuntu5.1",
        "12.0.0-1ubuntu5.2"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that libvirt incorrectly handled guest reboots in the\nlibxl driver. An attacker in a guest could possibly use this issue to\ncause the libvirt daemon to crash, resulting in a denial of service. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2021-4147)\n\nAlexander Kuznetsov discovered that libvirt incorrectly handled listing\nnetwork interfaces. An attacker could possibly use this issue to cause\nthe libvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-1441)\n\nIt was discovered that libvirt incorrectly handled certain values in its\nRPC library. An attacker could possibly use this issue to cause the\nlibvirt daemon to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.\n(CVE-2024-2494)\n\nIt was discovered that libvirt incorrectly handled listing network\ninterfaces under certain circumstances. An attacker could possibly use\nthis issue to cause the libvirt daemon to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. (CVE-2024-2496)\n\nIt was discovered that libvirt incorrectly set permissions on external\ninactive snapshots, making them world-readable. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu\n20.04 LTS. (CVE-2025-13193)\n\nIt was discovered that libvirt incorrectly handled certain characters in\nvirtual network definitions. An authenticated user could possibly use\nthis issue to inject arbitrary configuration directives and execute\narbitrary code as root. This issue did not affect Ubuntu 14.04 LTS.\n(CVE-2026-61477)\n\nIt was discovered that libvirt incorrectly handled certain XML input. An\nattacker could possibly use this issue to cause the libvirt daemon to\ncrash, resulting in a denial of service. (CVE-2026-61478)\n\nHe Wei discovered that libvirt incorrectly followed symbolic links when\nchanging file ownership. A local attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS, Ubuntu\n22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-63622)\n\nIt was discovered that libvirt incorrectly set permissions on images\nduring storage volume clone and convert operations, making them\ntemporarily world-readable. A local attacker could possibly use this\nissue to obtain sensitive information. (CVE-2026-63623)",
  "id": "USN-8652-1",
  "modified": "2026-08-19T16:56:44Z",
  "published": "2026-08-19T16:56:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8652-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-4147"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-1441"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-2494"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-2496"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-13193"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-61477"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-61478"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-63622"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-63623"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "libvirt vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-4147",
    "UBUNTU-CVE-2024-1441",
    "UBUNTU-CVE-2024-2494",
    "UBUNTU-CVE-2024-2496",
    "UBUNTU-CVE-2025-13193",
    "UBUNTU-CVE-2026-61477",
    "UBUNTU-CVE-2026-61478",
    "UBUNTU-CVE-2026-63622",
    "UBUNTU-CVE-2026-63623"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.