VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 24, 2014· Updated Jun 17, 2026

CVE-2014-0028

CVE-2014-0028

Description

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Red Hat/Libvirt5 versions
    cpe:2.3:a:redhat:libvirt:1.1.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:redhat:libvirt:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:libvirt:1.2.0:*:*:*:*:*:*:*
  • Libvirt/Libvirtllm-fuzzy
    Range: >=1.1.1, <=1.2.0
  • osv-coords
    pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
    Range: < 2.5.0-1.1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.