TI-2022-02041 CVE-2022-2211 · GHSA-8rvm-f29f-fjx6
Buffer overflow in libguestfs
Priority LOW 31
A vulnerability was found in libguestfs.
Libguestfs
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Libguestfs records in CISA KEVNo Libguestfs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2013-03872 CVE-2013-4419 · GHSA-3vxx-8f6w-cpxp
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote…
Priority LOW 31
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this d…
TI-2013-01893 CVE-2013-2124 · GHSA-565j-mpfh-22p5
Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x…
Priority LOW 25
Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.
TI-2010-03658 CVE-2010-3851 · GHSA-vc83-g5p3-ggc5
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and…
Priority LOW 22
libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a c…
TI-2012-02326 CVE-2012-2690 · GHSA-p84q-fgj5-q47p
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original…
Priority LOW 11
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive…