CVE-2016-5008
13.07.2016, 15:59
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | libvirt | 𝑥 ≤ 1.3.5 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libvirt |
|
Common Weakness Enumeration
References