CVE catalog

CVE-2020-10701

libvirt: CVE-2020-10701

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Mar 20, 2020, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.86% · Oct 25, 2026

A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response timeout. This flaw allows read-only connections to adjust the time that libvirt waits for the QEMU guest agent to respond to agent commands. Depending on the timeout value that is set, this flaw can make guest agent commands fail because the agent cannot respond in time. Unprivileged users with a read-only connection could abuse this flaw to set the response timeout for all guest agent messages to zero, potentially leading to a denial of service. This flaw affects libvirt versions before 6.2.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libvirt	sid	`12.8.0-1`	fixed
Debian	libvirt	forky	`12.8.0-1`	fixed
Debian	libvirt	trixie	`11.3.0-3+deb13u3`	fixed
Debian	libvirt	bookworm	`9.0.0-4+deb12u2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libvirt	source	sid	`6.0.0-7`	not yet assigned	Not reported	[955841]
Debian	libvirt	source	forky	`6.0.0-7`	not yet assigned	Not reported	[955841]
Debian	libvirt	source	trixie	`6.0.0-7`	not yet assigned	Not reported	[955841]
Debian	libvirt	source	bookworm	`6.0.0-7`	not yet assigned	Not reported	[955841]

[Debian bug #955841]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libnss-libvirt]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt0]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-clients]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-clients-qemu]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-common]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-common]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-config-network]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-config-nwfilter]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · all · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-interface]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-lxc]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-network]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-nodedev]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-nwfilter]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-qemu]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-secret]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-storage]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-storage-disk]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-storage-gluster]Fixed
Source package: [libvirt]
Details (4)
- 9.0.0-4+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 9.0.0-4+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
[libvirt-daemon-driver-storage-iscsi]Fixed
Source package: [libvirt]
Details (2)
- 11.3.0-2~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12
- 11.3.0-2~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 6.0.0-7
  dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

Next results

Observed: Oct 23, 2026, 5:46:18 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]