CVE-2019-10168

02.08.2019, 13:15

The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.

Path Traversal

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 45%

Affected Products (NVD)

Vendor	Product	Version
redhat	libvirt	4.0.0 ≤ 𝑥 < 4.10.1
redhat	libvirt	5.0.0 ≤ 𝑥 < 5.4.1
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_eus	7.6
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_workstation	6.0
redhat	enterprise_linux_workstation	7.0
redhat	virtualization	4.3

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libvirt

bookworm	9.0.0-4+deb12u1 fixed
bullseye	7.0.0-3+deb11u3 fixed
jessie	not-affected
sid	10.9.0-1 fixed
stretch	not-affected
trixie	10.9.0-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

libvirt

bionic	not-affected
cosmic	Fixed 4.6.0-2ubuntu3.8 released
disco	Fixed 5.0.0-1ubuntu2.4 released
trusty	not-affected
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libvirt

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-admin

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed

libvirt-bash-completion

suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	7.1.0-150300.6.29.1 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	7.1.0-150300.6.29.1 fixed

libvirt-client

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-client-qemu

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-common

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-config-network

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-config-nwfilter

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-interface

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-libxl

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-lxc

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed

libvirt-daemon-driver-network

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-nodedev

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-nwfilter

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-qemu

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-secret

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-core

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-disk

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-iscsi

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-iscsi-direct

suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-logical

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-mpath

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-rbd

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-driver-storage-scsi

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-hooks

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-lock

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-log

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-lxc

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed

libvirt-daemon-plugin-lockd

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-plugin-sanlock

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-proxy

suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-qemu

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-daemon-xen

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-devel

suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-doc

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

libvirt-libs

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed

libvirt-lock-sanlock

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed

libvirt-nss

suse enterprise sap 12 SP5	5.1.0-11.10 fixed
suse enterprise sap 15 SP1	5.1.0-8.6.1 fixed
suse enterprise sap 15 SP2	6.0.0-11.3 fixed
suse enterprise sap 15 SP3	7.1.0-4.1 fixed
suse enterprise sap 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise sap 15 SP7	11.0.0-150700.2.3 fixed
suse enterprise server 12 SP5	5.1.0-11.10 fixed
suse enterprise server 15 SP1	5.1.0-8.6.1 fixed
suse enterprise server 15 SP2	6.0.0-11.3 fixed
suse enterprise server 15 SP3	7.1.0-4.1 fixed
suse enterprise server 15 SP4	8.0.0-150400.5.8 fixed
suse enterprise server 15 SP7	11.0.0-150700.2.3 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

libvirt

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-admin

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-bash-completion

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-client

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-config-network

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-config-nwfilter

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-interface

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-lxc

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-network

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-nodedev

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-nwfilter

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-qemu

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-secret

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-core

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-disk

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-gluster

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-iscsi

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-logical

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-mpath

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-rbd

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-driver-storage-scsi

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-kvm

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-daemon-lxc

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-devel

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-docs

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-libs

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-lock-sanlock

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-login-shell

RHEL 7

0:4.5.0-10.el7_6.12

fixed

libvirt-nss

RHEL 7

0:4.5.0-10.el7_6.12

fixed

Common Weakness Enumeration

References

https://access.redhat.com/libvirt-privesc-vulnerabilities

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10168

https://security.gentoo.org/glsa/202003-18

https://access.redhat.com/libvirt-privesc-vulnerabilities

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10168

https://security.gentoo.org/glsa/202003-18