CVE-2015-0236

LOW · 3.5 CVSS Gepubliceerd: 29-01-2015 CWE-200

Beschrijving

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

Vendors

Mageia Redhat Opensuse Canonical

Affected products

Mageia Libvirt Opensuse Ubuntu Linux Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Workstation

References

advisories.mageia.org
lists.opensuse.org
rhn.redhat.com
secunia.com
security.libvirt.org
www.mandriva.com
www.mandriva.com
www.ubuntu.com