GHSA-g8pw-f6pq-hcg2

GHSA-g8pw-f6pq-hcg2 PUBLISHED

Record from GitHub Advisory Database · Published May 17, 2022

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.

Timeline

May 17, 2022 CVE Published
Apr 9, 2026 Security Advisory
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-g8pw-f6pq-hcg2
vulnetix vdb fixes GHSA-g8pw-f6pq-hcg2

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-g8pw-f6pq-hcg2/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html url
http://secunia.com/advisories/33198 url
http://secunia.com/advisories/33217 url
http://secunia.com/advisories/33292 url
http://secunia.com/advisories/34397 url
http://www.redhat.com/support/errata/RHSA-2009-0382.html url
http://www.securityfocus.com/bid/32905 url
http://www.ubuntu.com/usn/usn-694-1 url
https://nvd.nist.gov/vuln/detail/CVE-2008-5086 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=476560 url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8765 url
http://www.redhat.com/archives/fedora-package-announce/2008-December/msg00938.html url
https://www.redhat.com/archives/libvir-list/2008-December/msg00522.html url
http://osvdb.org/50919 url

Look up in the Resolve Platform →