Access Control

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user o…CVE-2019-10132libvirt · CVSS 8.8 · 1.4% likely

   CWE-732

2. An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to pote…CVE-2019-3886The libvirt Project · CVSS 5.4 · 1.1% likely

   CWE-862

3. The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the p…CVE-2019-10168libvirt · CVSS 8.8 · 0.5% likely

   CWE-250

4. The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulatio…CVE-2019-10167libvirt · CVSS 8.8 · 0.5% likely

   CWE-250

5. It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which w…CVE-2019-10161Libvirt · CVSS 8.8 · 0.5% likely

   CWE-284

6. It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would per…CVE-2019-10166libvirt · CVSS 7.8 · 0.5% likely

   CWE-284

7. Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by…CVE-2010-2242Libvirt · 0.4% likely

   CWE-264

8. Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the…CVE-2010-2239Libvirt · 0.3% likely

   CWE-264

9. Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users t…CVE-2010-2238Libvirt · 0.3% likely

   CWE-264

10. Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitr…CVE-2010-2237Libvirt · 0.3% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.