CVE catalog

CVE-2021-3631

libvirt affected and fixed versions

[CVE catalog]

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Severity
Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.49% · Oct 27, 2026

Projects and upstream resources

Related catalog projects (12)

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixielibvirt11.3.0-3+deb13u3Fixed[CVE-2021-3631]
Debiantrixielibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debiansidlibvirt12.8.0-1Fixed[CVE-2021-3631]
Debiansidlibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debianforkylibvirt12.8.0-1Fixed[CVE-2021-3631]
Debianforkylibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debianbookwormlibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debianbookwormlibvirt9.0.0-4+deb12u2Fixed[CVE-2021-3631]

Showing 8 fix observations. All 117 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormlibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debianbookwormlibvirt9.0.0-4+deb12u2Fixed[CVE-2021-3631]
Debianforkylibvirt12.8.0-1Fixed[CVE-2021-3631]
Debianforkylibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debiansidlibvirt12.8.0-1Fixed[CVE-2021-3631]
Debiansidlibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Debiantrixielibvirt11.3.0-3+deb13u3Fixed[CVE-2021-3631]
Debiantrixielibvirt7.6.0-1FixedDistribution-reported fixed boundary[CVE-2021-3631]
Opensuseleap 15.2libvirt6.0.0-lp152.9.12.1UnknownSource applicability is not established[OPENSUSE-SU-2021:1119-1]
Opensuseleap 15.3libvirt7.1.0-6.5.1UnknownSource applicability is not established[OPENSUSE-SU-2021:2812-1]
Suselinux enterprise micro 5.0libvirt6.0.0-13.16.2UnknownSource applicability is not established[SUSE-SU-2021:2471-1]
Suselinux enterprise module for basesystem 15 sp2libvirt6.0.0-13.16.2UnknownSource applicability is not established[SUSE-SU-2021:2471-1]
Suselinux enterprise module for basesystem 15 sp3libvirt7.1.0-6.5.1UnknownSource applicability is not established[SUSE-SU-2021:2812-1]
Suselinux enterprise module for server applications 15 sp2libvirt6.0.0-13.16.2UnknownSource applicability is not established[SUSE-SU-2021:2471-1]
Suselinux enterprise module for server applications 15 sp3libvirt7.1.0-6.5.1UnknownSource applicability is not established[SUSE-SU-2021:2812-1]
Ubuntu18.04libvirt3.6.0-1ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt3.6.0-1ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.10UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.11UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.12UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.13UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.14UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.15UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.16UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.17UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.19UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.20UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.21UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu18.04libvirt4.0.0-1ubuntu8.9UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt5.4.0-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.10UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.11UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.12UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.13UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.14UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.15UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.16UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu20.04libvirt6.0.0-0ubuntu8.9UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu22.04libvirt7.6.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntu22.04libvirt7.6.0-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.16-2ubuntu11UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.16-2ubuntu12UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.16-2ubuntu13UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.16-2ubuntu14UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.2.21-2ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.10UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.11UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.12UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.13UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.14UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.15UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.17UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.18UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.19UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.21UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.22UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.23UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.24UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.25UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.26UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.27UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.29UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.30UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.31UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.31+esm1UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.5UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.7UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu10.8UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu6UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Ubuntuprolibvirt1.3.1-1ubuntu9UnknownSource applicability is not established[UBUNTU-CVE-2021-3631]
Original provider fields
{
  "package_releases": [
    {
      "name": "libvirt",
      "status": "fixed",
      "release": "sid",
      "version": "12.8.0-1"
    },
    {
      "name": "libvirt",
      "status": "fixed",
      "release": "forky",
      "version": "12.8.0-1"
    },
    {
      "name": "libvirt",
      "status": "fixed",
      "release": "trixie",
      "version": "11.3.0-3+deb13u3"
    },
    {
      "name": "libvirt",
      "status": "fixed",
      "release": "bookworm",
      "version": "9.0.0-4+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": 990709,
      "name": "libvirt",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7.6.0-1"
    },
    {
      "bug": 990709,
      "name": "libvirt",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7.6.0-1"
    },
    {
      "bug": 990709,
      "name": "libvirt",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7.6.0-1"
    },
    {
      "bug": 990709,
      "name": "libvirt",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "7.6.0-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "libvirt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.2.16-2ubuntu11",
        "1.2.16-2ubuntu12",
        "1.2.16-2ubuntu13",
        "1.2.16-2ubuntu14",
        "1.2.21-2ubuntu1",
        "1.2.21-2ubuntu3",
        "1.2.21-2ubuntu4",
        "1.2.21-2ubuntu5",
        "1.2.21-2ubuntu7",
        "1.2.21-2ubuntu8",
        "1.2.21-2ubuntu9",
        "1.2.21-2ubuntu10",
        "1.3.1-1ubuntu1",
        "1.3.1-1ubuntu2",
        "1.3.1-1ubuntu3",
        "1.3.1-1ubuntu4",
        "1.3.1-1ubuntu6",
        "1.3.1-1ubuntu9",
        "1.3.1-1ubuntu10",
        "1.3.1-1ubuntu10.1",
        "1.3.1-1ubuntu10.2",
        "1.3.1-1ubuntu10.3",
        "1.3.1-1ubuntu10.5",
        "1.3.1-1ubuntu10.6",
        "1.3.1-1ubuntu10.7",
        "1.3.1-1ubuntu10.8",
        "1.3.1-1ubuntu10.10",
        "1.3.1-1ubuntu10.11",
        "1.3.1-1ubuntu10.12",
        "1.3.1-1ubuntu10.13",
        "1.3.1-1ubuntu10.14",
        "1.3.1-1ubuntu10.15",
        "1.3.1-1ubuntu10.17",
        "1.3.1-1ubuntu10.18",
        "1.3.1-1ubuntu10.19",
        "1.3.1-1ubuntu10.21",
        "1.3.1-1ubuntu10.22",
        "1.3.1-1ubuntu10.23",
        "1.3.1-1ubuntu10.24",
        "1.3.1-1ubuntu10.25",
        "1.3.1-1ubuntu10.26",
        "1.3.1-1ubuntu10.27",
        "1.3.1-1ubuntu10.29",
        "1.3.1-1ubuntu10.30",
        "1.3.1-1ubuntu10.31",
        "1.3.1-1ubuntu10.31+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3631",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3631",
      "provider_updated_at": "2026-08-20T00:00:20.332918330Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.0-1ubuntu8.21"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "3.6.0-1ubuntu5",
        "3.6.0-1ubuntu6",
        "4.0.0-1ubuntu1",
        "4.0.0-1ubuntu2",
        "4.0.0-1ubuntu3",
        "4.0.0-1ubuntu4",
        "4.0.0-1ubuntu5",
        "4.0.0-1ubuntu6",
        "4.0.0-1ubuntu7",
        "4.0.0-1ubuntu8",
        "4.0.0-1ubuntu8.1",
        "4.0.0-1ubuntu8.2",
        "4.0.0-1ubuntu8.3",
        "4.0.0-1ubuntu8.4",
        "4.0.0-1ubuntu8.5",
        "4.0.0-1ubuntu8.6",
        "4.0.0-1ubuntu8.7",
        "4.0.0-1ubuntu8.8",
        "4.0.0-1ubuntu8.9",
        "4.0.0-1ubuntu8.10",
        "4.0.0-1ubuntu8.11",
        "4.0.0-1ubuntu8.12",
        "4.0.0-1ubuntu8.13",
        "4.0.0-1ubuntu8.14",
        "4.0.0-1ubuntu8.15",
        "4.0.0-1ubuntu8.16",
        "4.0.0-1ubuntu8.17",
        "4.0.0-1ubuntu8.19",
        "4.0.0-1ubuntu8.20"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3631",
      "fixed_version": "4.0.0-1ubuntu8.21",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3631",
      "provider_updated_at": "2026-08-20T00:00:20.332918330Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-0ubuntu8.16"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "5.4.0-0ubuntu5",
        "6.0.0-0ubuntu1",
        "6.0.0-0ubuntu2",
        "6.0.0-0ubuntu3",
        "6.0.0-0ubuntu4",
        "6.0.0-0ubuntu5",
        "6.0.0-0ubuntu6",
        "6.0.0-0ubuntu7",
        "6.0.0-0ubuntu8",
        "6.0.0-0ubuntu8.1",
        "6.0.0-0ubuntu8.2",
        "6.0.0-0ubuntu8.3",
        "6.0.0-0ubuntu8.4",
        "6.0.0-0ubuntu8.5",
        "6.0.0-0ubuntu8.7",
        "6.0.0-0ubuntu8.8",
        "6.0.0-0ubuntu8.9",
        "6.0.0-0ubuntu8.10",
        "6.0.0-0ubuntu8.11",
        "6.0.0-0ubuntu8.12",
        "6.0.0-0ubuntu8.13",
        "6.0.0-0ubuntu8.14",
        "6.0.0-0ubuntu8.15"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3631",
      "fixed_version": "6.0.0-0ubuntu8.16",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3631",
      "provider_updated_at": "2026-08-20T00:00:20.332918330Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.6.0-0ubuntu3"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "7.6.0-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-3631",
      "fixed_version": "7.6.0-0ubuntu3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2021-3631",
      "provider_updated_at": "2026-08-20T00:00:20.332918330Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.0-6.5.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:2812-1",
      "fixed_version": "7.1.0-6.5.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:2812-1",
      "provider_updated_at": "2026-02-04T03:25:49.625161Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-lp152.9.12.1"
            }
          ]
        }
      ],
      "release": "leap 15.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2021:1119-1",
      "fixed_version": "6.0.0-lp152.9.12.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2021:1119-1",
      "provider_updated_at": "2026-02-04T03:07:36.505647Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-13.16.2"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2471-1",
      "fixed_version": "6.0.0-13.16.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2471-1",
      "provider_updated_at": "2026-02-04T02:18:54.497338Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-13.16.2"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2471-1",
      "fixed_version": "6.0.0-13.16.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2471-1",
      "provider_updated_at": "2026-02-04T02:18:54.497338Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.0.0-13.16.2"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2471-1",
      "fixed_version": "6.0.0-13.16.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2471-1",
      "provider_updated_at": "2026-02-04T02:18:54.497338Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.0-6.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2812-1",
      "fixed_version": "7.1.0-6.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2812-1",
      "provider_updated_at": "2026-02-04T02:14:05.575108Z",
      "applicability_unknown": true
    },
    {
      "name": "libvirt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.0-6.5.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2812-1",
      "fixed_version": "7.1.0-6.5.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2812-1",
      "provider_updated_at": "2026-02-04T02:14:05.575108Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #990709]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libnss-libvirt]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt0]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-clients]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-clients-qemu]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-common]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-common]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-config-network]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-config-nwfilter]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · all · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-interface]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-lxc]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-network]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-nodedev]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-nwfilter]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-qemu]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-secret]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-storage]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-storage-disk]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-storage-gluster]Unknown

    Source package: [libvirt]

    Details (4)

    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

  • [libvirt-daemon-driver-storage-iscsi]Unknown

    Source package: [libvirt]

    Details (2)

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 7.6.0-1

      dsa · libvirt · debian · bookworm; dsa · libvirt · debian · 12

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]