VDB

GCVE-110-MAGEIA-2015-46

GCVE-110-MAGEIA-2015-46
Advisory Published
Vulnetix · Advisory published January 31, 2015
Updated libvirt packages fix security vulnerability: The XML getters for save images and snapshots objects don't check ACLs for the VIR_DOMAIN_XML_SECURE flag and might possibly dump security sensitive information. A remote attacker able to establish a connection to libvirtd could use this flaw to cause leak certain limited information from the domain xml file (CVE-2015-0236).

Affected Products

VendorProductVersionsPlatforms
Mageialibvirt0 (affected), 1.2.1-1.5.mga4 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›