Количество 13
Количество 13
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
CVE-2026-61477
Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection
CVE-2026-61477
An injection vulnerability was found in libvirt's virtual network driv ...
GHSA-f6jp-rhmm-v59g
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.
ALT-PU-2026-13014
ALT-PU-2026-13014: package `libvirt` update to version 12.6.0-alt2
openSUSE-SU-2026:21738-1
Security update for libvirt
SUSE-SU-2026:4141-1
Security update for libvirt
SUSE-SU-2026:4010-1
Security update for libvirt
SUSE-SU-2026:4009-1
Security update for libvirt
SUSE-SU-2026:4004-1
Security update for libvirt
SUSE-SU-2026:3939-1
Security update for libvirt
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-61477 An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root. | CVSS3: 2.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-61477 An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root. | CVSS3: 2.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-61477 An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root. | CVSS3: 2.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-61477 Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection | CVSS3: 2.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-61477 An injection vulnerability was found in libvirt's virtual network driv ... | CVSS3: 2.3 | 0% Низкий | 3 месяца назад |
| GHSA-f6jp-rhmm-v59g An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root. | CVSS3: 2.3 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-13014 ALT-PU-2026-13014: package `libvirt` update to version 12.6.0-alt2 | CVSS3: 7.8 | 2 месяца назад | |
 | openSUSE-SU-2026:21738-1 Security update for libvirt | около 2 месяцев назад | ||
| SUSE-SU-2026:4141-1 Security update for libvirt | около 1 месяца назад | ||
| SUSE-SU-2026:4010-1 Security update for libvirt | около 2 месяцев назад | ||
| SUSE-SU-2026:4009-1 Security update for libvirt | около 2 месяцев назад | ||
| SUSE-SU-2026:4004-1 Security update for libvirt | около 2 месяцев назад | ||
| SUSE-SU-2026:3939-1 Security update for libvirt | около 2 месяцев назад |
Уязвимостей на страницу