Логотип exploitDog
bind:CVE-2025-12748
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-12748

Количество 10

Количество 10

ubuntu логотип

CVE-2025-12748

3 месяца назад

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2025-12748

3 месяца назад

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2025-12748

2 месяца назад

Libvirt: denial of service in xml parsing

EPSS: Низкий
debian логотип

CVE-2025-12748

3 месяца назад

A flaw was discovered in libvirt in the XML file processing. More spec ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-qwrw-p888-cc55

3 месяца назад

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2025-16420

4 месяца назад

Уязвимость библиотеки управления виртуализацией libvirt, связанная с недостатками контроля доступа, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025:20100-1

2 месяца назад

Security update for libvirt

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0279-1

17 дней назад

Security update for libvirt

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0193-1

19 дней назад

Security update for libvirt

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0068-1

около 1 месяца назад

Security update for libvirt

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-12748

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-12748

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2025-12748

Libvirt: denial of service in xml parsing

0%
Низкий
2 месяца назад
debian логотип
CVE-2025-12748

A flaw was discovered in libvirt in the XML file processing. More spec ...

CVSS3: 5.5
0%
Низкий
3 месяца назад
github логотип
GHSA-qwrw-p888-cc55

A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition.

CVSS3: 5.5
0%
Низкий
3 месяца назад
fstec логотип
BDU:2025-16420

Уязвимость библиотеки управления виртуализацией libvirt, связанная с недостатками контроля доступа, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
4 месяца назад
suse-cvrf логотип
openSUSE-SU-2025:20100-1

Security update for libvirt

2 месяца назад
suse-cvrf логотип
SUSE-SU-2026:0279-1

Security update for libvirt

17 дней назад
suse-cvrf логотип
SUSE-SU-2026:0193-1

Security update for libvirt

19 дней назад
suse-cvrf логотип
SUSE-SU-2026:0068-1

Security update for libvirt

около 1 месяца назад

Уязвимостей на страницу