CVE-2016-10746
Fixed in a distro release EPSS 2%
libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.
Products: redhat libvirt, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libvirt | 1.3.1-1 |
| Debian 13 | libvirt | 1.3.1-1 |
| Debian 14 | libvirt | 1.3.1-1 |
| Debian 8 | libvirt | 1.2.9-9+deb8u6 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | libvirt | 1.2.5-23.24.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | libvirt-python | 1.2.5-3.3.2 |