CVE catalog

CVE-2008-5086

libvirt: CVE-2008-5086

Severity: Medium
Published: Dec 19, 2008, 5:30:03 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.38% · Oct 25, 2026

Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libvirt	sid	`12.8.0-1`	fixed
Debian	libvirt	forky	`12.8.0-1`	fixed
Debian	libvirt	trixie	`11.3.0-3+deb13u3`	fixed
Debian	libvirt	bookworm	`9.0.0-4+deb12u2`	fixed
Opensuse	libvirt	tumbleweed	`7.7.0-2.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libvirt	source	sid	`0.4.6-10`	not yet assigned	Not reported	Not reported
Debian	libvirt	source	forky	`0.4.6-10`	not yet assigned	Not reported	Not reported
Debian	libvirt	source	trixie	`0.4.6-10`	not yet assigned	Not reported	Not reported
Debian	libvirt	source	bookworm	`0.4.6-10`	not yet assigned	Not reported	Not reported
Opensuse	libvirt	rpm	tumbleweed	`7.7.0-2.1`	Not reported	OPENSUSE-SU-2024:11008-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libvirt-client]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-client-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-common]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-libxl]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-lxc]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nodedev]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-secret]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-core]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-disk]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi-direct]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-logical]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-mpath]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 7.7.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 5:04:23 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]