libvirt

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. libvirt version before 4.2.0-rc1 is vulnerable to a resource exhaustion as a result of an incomplete fix for CVE-2018-5748 that affects QEMU monitor but now also triggered via QEM…CVE-2018-1064libvirt · 2.9% likely

   CWE-400

2. The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial…CVE-2014-3657Libvirt · 2.8% likely

   CWE-399

3. The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to ca…CVE-2014-3633Libvirt · 2.8% likely

   CWE-119

4. A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its tar…CVE-2020-10703libvirt · CVSS 6.5 · 2.4% likely

   CWE-476

5. A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon r…CVE-2017-2635The libvirt Project · CVSS 7.7 · 1.5% likely

   CWE-476

6. A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use t…CVE-2019-3840The libvirt Project · CVSS 5.8 · 1.5% likely

   CWE-476

7. A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user o…CVE-2019-10132libvirt · CVSS 8.8 · 1.4% likely

   CWE-732

8. Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header…CVE-2009-0036Libvirt · 1.2% likely

   CWE-119

9. An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to pote…CVE-2019-3886The libvirt Project · CVSS 5.4 · 1.1% likely

   CWE-862

10. The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the p…CVE-2019-10168libvirt · CVSS 8.8 · 0.5% likely

    CWE-250

11. The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulatio…CVE-2019-10167libvirt · CVSS 8.8 · 0.5% likely

    CWE-250

12. It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which w…CVE-2019-10161Libvirt · CVSS 8.8 · 0.5% likely

    CWE-284

13. It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would per…CVE-2019-10166libvirt · CVSS 7.8 · 0.5% likely

    CWE-284

14. Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by…CVE-2010-2242Libvirt · 0.4% likely

    CWE-264

15. libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a proce…CVE-2015-5160Libvirt · 0.4% likely

    CWE-200

16. Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrati…CVE-2008-5086Libvirt · 0.4% likely
17. Red Hat libvirt, possibly 0.6.0 through 0.8.2, creates new images without setting the user-defined backing-store format, which allows guest OS users to read arbitrary files on the…CVE-2010-2239Libvirt · 0.3% likely

    CWE-264

18. Red Hat libvirt, possibly 0.7.2 through 0.8.2, recurses into disk-image backing stores without extracting the defined disk backing-store format, which might allow guest OS users t…CVE-2010-2238Libvirt · 0.3% likely

    CWE-264

19. Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitr…CVE-2010-2237Libvirt · 0.3% likely

    CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.