virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original…
Priority LOW 11CWE-255Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information.
Why it matters now
EPSS 0.00408 35th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 71
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:* | up to 1.17.43 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.0:*:*:*:*:*:*:* | 1.16.0 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.1:*:*:*:*:*:*:* | 1.16.1 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.2:*:*:*:*:*:*:* | 1.16.2 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.3:*:*:*:*:*:*:* | 1.16.3 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.4:*:*:*:*:*:*:* | 1.16.4 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.5:*:*:*:*:*:*:* | 1.16.5 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.6:*:*:*:*:*:*:* | 1.16.6 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.7:*:*:*:*:*:*:* | 1.16.7 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.8:*:*:*:*:*:*:* | 1.16.8 | Vulnerable | Libguestfs |
- cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:* Versions up to 1.17.43 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.0:*:*:*:*:*:*:* Versions 1.16.0 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.1:*:*:*:*:*:*:* Versions 1.16.1 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.2:*:*:*:*:*:*:* Versions 1.16.2 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.3:*:*:*:*:*:*:* Versions 1.16.3 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.4:*:*:*:*:*:*:* Versions 1.16.4 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.5:*:*:*:*:*:*:* Versions 1.16.5 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.6:*:*:*:*:*:*:* Versions 1.16.6 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.7:*:*:*:*:*:*:* Versions 1.16.7 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.8:*:*:*:*:*:*:* Versions 1.16.8 Vulnerable ·Libguestfs
Show 61 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:libguestfs:libguestfs:1.16.9:*:*:*:*:*:*:* | 1.16.9 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.10:*:*:*:*:*:*:* | 1.16.10 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.11:*:*:*:*:*:*:* | 1.16.11 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.12:*:*:*:*:*:*:* | 1.16.12 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.13:*:*:*:*:*:*:* | 1.16.13 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.14:*:*:*:*:*:*:* | 1.16.14 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.15:*:*:*:*:*:*:* | 1.16.15 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.16:*:*:*:*:*:*:* | 1.16.16 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.17:*:*:*:*:*:*:* | 1.16.17 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.18:*:*:*:*:*:*:* | 1.16.18 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.19:*:*:*:*:*:*:* | 1.16.19 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.20:*:*:*:*:*:*:* | 1.16.20 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.21:*:*:*:*:*:*:* | 1.16.21 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.22:*:*:*:*:*:*:* | 1.16.22 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.23:*:*:*:*:*:*:* | 1.16.23 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.24:*:*:*:*:*:*:* | 1.16.24 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.25:*:*:*:*:*:*:* | 1.16.25 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.16.26:*:*:*:*:*:*:* | 1.16.26 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.0:*:*:*:*:*:*:* | 1.17.0 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.1:*:*:*:*:*:*:* | 1.17.1 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.2:*:*:*:*:*:*:* | 1.17.2 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.3:*:*:*:*:*:*:* | 1.17.3 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.4:*:*:*:*:*:*:* | 1.17.4 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.5:*:*:*:*:*:*:* | 1.17.5 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.6:*:*:*:*:*:*:* | 1.17.6 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.7:*:*:*:*:*:*:* | 1.17.7 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.8:*:*:*:*:*:*:* | 1.17.8 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.9:*:*:*:*:*:*:* | 1.17.9 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.10:*:*:*:*:*:*:* | 1.17.10 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.11:*:*:*:*:*:*:* | 1.17.11 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.12:*:*:*:*:*:*:* | 1.17.12 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.13:*:*:*:*:*:*:* | 1.17.13 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.14:*:*:*:*:*:*:* | 1.17.14 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.15:*:*:*:*:*:*:* | 1.17.15 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.16:*:*:*:*:*:*:* | 1.17.16 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.17:*:*:*:*:*:*:* | 1.17.17 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.18:*:*:*:*:*:*:* | 1.17.18 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.19:*:*:*:*:*:*:* | 1.17.19 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.20:*:*:*:*:*:*:* | 1.17.20 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.21:*:*:*:*:*:*:* | 1.17.21 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.22:*:*:*:*:*:*:* | 1.17.22 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.23:*:*:*:*:*:*:* | 1.17.23 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.24:*:*:*:*:*:*:* | 1.17.24 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.25:*:*:*:*:*:*:* | 1.17.25 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.26:*:*:*:*:*:*:* | 1.17.26 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.27:*:*:*:*:*:*:* | 1.17.27 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.28:*:*:*:*:*:*:* | 1.17.28 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.29:*:*:*:*:*:*:* | 1.17.29 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.30:*:*:*:*:*:*:* | 1.17.30 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.31:*:*:*:*:*:*:* | 1.17.31 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.32:*:*:*:*:*:*:* | 1.17.32 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.33:*:*:*:*:*:*:* | 1.17.33 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.34:*:*:*:*:*:*:* | 1.17.34 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.35:*:*:*:*:*:*:* | 1.17.35 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.36:*:*:*:*:*:*:* | 1.17.36 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.37:*:*:*:*:*:*:* | 1.17.37 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.38:*:*:*:*:*:*:* | 1.17.38 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.39:*:*:*:*:*:*:* | 1.17.39 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.40:*:*:*:*:*:*:* | 1.17.40 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.41:*:*:*:*:*:*:* | 1.17.41 | Vulnerable | Libguestfs |
| cpe:2.3:a:libguestfs:libguestfs:1.17.42:*:*:*:*:*:*:* | 1.17.42 | Vulnerable | Libguestfs |
- cpe:2.3:a:libguestfs:libguestfs:1.16.9:*:*:*:*:*:*:* Versions 1.16.9 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.10:*:*:*:*:*:*:* Versions 1.16.10 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.11:*:*:*:*:*:*:* Versions 1.16.11 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.12:*:*:*:*:*:*:* Versions 1.16.12 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.13:*:*:*:*:*:*:* Versions 1.16.13 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.14:*:*:*:*:*:*:* Versions 1.16.14 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.15:*:*:*:*:*:*:* Versions 1.16.15 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.16:*:*:*:*:*:*:* Versions 1.16.16 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.17:*:*:*:*:*:*:* Versions 1.16.17 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.18:*:*:*:*:*:*:* Versions 1.16.18 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.19:*:*:*:*:*:*:* Versions 1.16.19 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.20:*:*:*:*:*:*:* Versions 1.16.20 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.21:*:*:*:*:*:*:* Versions 1.16.21 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.22:*:*:*:*:*:*:* Versions 1.16.22 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.23:*:*:*:*:*:*:* Versions 1.16.23 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.24:*:*:*:*:*:*:* Versions 1.16.24 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.25:*:*:*:*:*:*:* Versions 1.16.25 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.16.26:*:*:*:*:*:*:* Versions 1.16.26 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.0:*:*:*:*:*:*:* Versions 1.17.0 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.1:*:*:*:*:*:*:* Versions 1.17.1 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.2:*:*:*:*:*:*:* Versions 1.17.2 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.3:*:*:*:*:*:*:* Versions 1.17.3 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.4:*:*:*:*:*:*:* Versions 1.17.4 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.5:*:*:*:*:*:*:* Versions 1.17.5 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.6:*:*:*:*:*:*:* Versions 1.17.6 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.7:*:*:*:*:*:*:* Versions 1.17.7 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.8:*:*:*:*:*:*:* Versions 1.17.8 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.9:*:*:*:*:*:*:* Versions 1.17.9 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.10:*:*:*:*:*:*:* Versions 1.17.10 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.11:*:*:*:*:*:*:* Versions 1.17.11 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.12:*:*:*:*:*:*:* Versions 1.17.12 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.13:*:*:*:*:*:*:* Versions 1.17.13 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.14:*:*:*:*:*:*:* Versions 1.17.14 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.15:*:*:*:*:*:*:* Versions 1.17.15 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.16:*:*:*:*:*:*:* Versions 1.17.16 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.17:*:*:*:*:*:*:* Versions 1.17.17 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.18:*:*:*:*:*:*:* Versions 1.17.18 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.19:*:*:*:*:*:*:* Versions 1.17.19 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.20:*:*:*:*:*:*:* Versions 1.17.20 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.21:*:*:*:*:*:*:* Versions 1.17.21 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.22:*:*:*:*:*:*:* Versions 1.17.22 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.23:*:*:*:*:*:*:* Versions 1.17.23 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.24:*:*:*:*:*:*:* Versions 1.17.24 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.25:*:*:*:*:*:*:* Versions 1.17.25 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.26:*:*:*:*:*:*:* Versions 1.17.26 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.27:*:*:*:*:*:*:* Versions 1.17.27 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.28:*:*:*:*:*:*:* Versions 1.17.28 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.29:*:*:*:*:*:*:* Versions 1.17.29 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.30:*:*:*:*:*:*:* Versions 1.17.30 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.31:*:*:*:*:*:*:* Versions 1.17.31 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.32:*:*:*:*:*:*:* Versions 1.17.32 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.33:*:*:*:*:*:*:* Versions 1.17.33 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.34:*:*:*:*:*:*:* Versions 1.17.34 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.35:*:*:*:*:*:*:* Versions 1.17.35 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.36:*:*:*:*:*:*:* Versions 1.17.36 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.37:*:*:*:*:*:*:* Versions 1.17.37 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.38:*:*:*:*:*:*:* Versions 1.17.38 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.39:*:*:*:*:*:*:* Versions 1.17.39 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.40:*:*:*:*:*:*:* Versions 1.17.40 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.41:*:*:*:*:*:*:* Versions 1.17.41 Vulnerable ·Libguestfs
- cpe:2.3:a:libguestfs:libguestfs:1.17.42:*:*:*:*:*:*:* Versions 1.17.42 Vulnerable ·Libguestfs
Remediation
Red Hat 1 advisory
- RHSA-2012:0774 Released 2012-06-19 · Red Hat rating Lowlibguestfs security, bug fix, and enhancement update
- Red Hat Enterprise Linux Desktop (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-java-1:1.16.19-1.el6, libguestfs-tools-1:1.16.19-1.el6 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-devel-1:1.16.19-1.el6, libguestfs-java-devel-1:1.16.19-1.el6 +4
- Red Hat Enterprise Linux HPC Node (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-java-1:1.16.19-1.el6, libguestfs-tools-1:1.16.19-1.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-devel-1:1.16.19-1.el6, libguestfs-java-devel-1:1.16.19-1.el6 +4
- Red Hat Enterprise Linux Server (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-java-1:1.16.19-1.el6, libguestfs-tools-1:1.16.19-1.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-devel-1:1.16.19-1.el6, libguestfs-java-devel-1:1.16.19-1.el6 +4
- Red Hat Enterprise Linux Workstation (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-java-1:1.16.19-1.el6, libguestfs-tools-1:1.16.19-1.el6 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libguestfs-1:1.16.19-1.el6, libguestfs-devel-1:1.16.19-1.el6, libguestfs-java-devel-1:1.16.19-1.el6 +4
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0774 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0774 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-2690
- 2026-10-03 Alias added: GHSA-p84q-fgj5-q47p
References
More Libguestfs vulnerabilities
- TI-2022-02041 Buffer overflow in libguestfs CVSS 3.1MEDIUM 6.5
- TI-2013-03872 The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote… CVSS 2.0MEDIUM 6.8
- TI-2013-01893 Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x… CVSS 2.0MEDIUM 4.3
- TI-2010-03658 libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and… CVSS 2.0MEDIUM 4.7
Sources
- CVE-2012-2690 · CVE Program
- CVE-2012-2690 · NVD
- FIRST EPSS
- GHSA-p84q-fgj5-q47p · GitHub Advisory Database · CC BY 4.0
- CVE-2012-2690 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences