CVE catalog

CVE-2025-13193

libvirt vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.13% · Oct 25, 2026

A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibvirtsid12.8.0-1fixed
Debianlibvirtforky12.8.0-1fixed
Debianlibvirttrixie11.3.0-3+deb13u3fixed
Debianlibvirtbookworm9.0.0-4+deb12u2not affected
Ubuntulibvirtnoble10.0.0-2ubuntu8.11fixed
Ubuntulibnss-libvirtnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-clientsnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-clients-qemunoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemonnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-config-networknoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-config-nwfilternoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-lxcnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-qemunoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-storage-glusternoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-storage-iscsi-directnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-storage-rbdnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-storage-zfsnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-vboxnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-driver-xennoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-systemnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-system-systemdnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-daemon-system-sysvnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-devnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-docnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-l10nnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-login-shellnoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-sanlocknoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt-wiresharknoble10.0.0-2ubuntu8.11fixed
Ubuntulibvirt0noble10.0.0-2ubuntu8.11fixed
Ubuntulibvirtpro5.4.0-0ubuntu5vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu1vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu2vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu3vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu4vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu5vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu6vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu7vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.1vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.2vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.3vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.4vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.5vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.7vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.8vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.9vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.10vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.11vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.12vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.13vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.14vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.15vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.16vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.19vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.20vulnerable
Ubuntulibvirtpro6.0.0-0ubuntu8.20+esm1fixed
Ubuntulibvirt22.047.6.0-0ubuntu1vulnerable
Ubuntulibvirt22.047.6.0-0ubuntu3vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu3vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu4vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu5vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu6vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.1vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.2vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.3vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.4vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.5vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.6vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.7vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.8vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.9vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.10vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.11vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.12vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.13vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.14vulnerable
Ubuntulibvirt22.048.0.0-1ubuntu7.15fixed
Ubuntulibvirt24.049.6.0-1ubuntu1vulnerable
Ubuntulibvirt24.049.6.0-1ubuntu2vulnerable
Ubuntulibvirt24.0410.0.0-1ubuntu1vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu1vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu5vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu7vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.1vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.2vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.3vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.4vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.5vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.6vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.7vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.8vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.9vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.10vulnerable
Ubuntulibvirt24.0410.0.0-2ubuntu8.11fixed
Ubuntulibvirt25.1011.0.0-2ubuntu6vulnerable
Ubuntulibvirt25.1011.0.0-2ubuntu8vulnerable
Ubuntulibvirt25.1011.4.0-1ubuntu1vulnerable
Ubuntulibvirt25.1011.4.0-1ubuntu2vulnerable
Ubuntulibvirt25.1011.6.0-1ubuntu1vulnerable
Ubuntulibvirt25.1011.6.0-1ubuntu2vulnerable
Ubuntulibvirt25.1011.6.0-1ubuntu3vulnerable
Ubuntulibvirt25.1011.6.0-1ubuntu3.1vulnerable
Ubuntulibvirt25.1011.6.0-1ubuntu3.2fixed
Ubuntulibvirt26.0411.6.0-1ubuntu3vulnerable
Ubuntulibvirt26.0411.6.0-1ubuntu5vulnerable
Ubuntulibvirt26.0411.6.0-1ubuntu6vulnerable
Ubuntulibvirt26.0411.6.0-1ubuntu7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibvirtsourcesid11.10.0-1not yet assignedNot reported[1120119]
Debianlibvirtsourceforky11.10.0-1not yet assignedNot reported[1120119]
Debianlibvirtsourcetrixie11.3.0-3+deb13u2not yet assignedNot reported[1120119]
DebianlibvirtsourcebookwormNot affectedunimportantNot reported[1120119]
Ubuntulibvirtdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibnss-libvirtdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-clientsdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-clients-qemudebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemondebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-config-networkdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-config-nwfilterdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-lxcdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-qemudebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-storage-glusterdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-storage-iscsi-directdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-storage-rbddebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-storage-zfsdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-vboxdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-driver-xendebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-systemdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-system-systemddebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-daemon-system-sysvdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-devdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-docdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-l10ndebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-login-shelldebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-sanlockdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt-wiresharkdebnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirt0debnoble10.0.0-2ubuntu8.11Not reportedNot reportedNot reported
Ubuntulibvirtdebpro6.0.0-0ubuntu8.20+esm1Not reportedUBUNTU-CVE-2025-13193Not reported
Ubuntulibvirtdeb22.048.0.0-1ubuntu7.15Not reportedUBUNTU-CVE-2025-13193Not reported
Ubuntulibvirtdeb24.0410.0.0-2ubuntu8.11Not reportedUBUNTU-CVE-2025-13193Not reported
Ubuntulibvirtdeb25.1011.6.0-1ubuntu3.2Not reportedUBUNTU-CVE-2025-13193Not reported
Ubuntulibvirtdeb26.0411.6.0-1ubuntu7Not reportedUBUNTU-CVE-2025-13193Not reported

[Debian bug #1120119]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libnss-libvirt]Not affected

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt0]Not affected

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt-clients]Not affected

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt-clients-qemu]Not affected

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt-common]Not affected

    Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt-daemon]Not affected

    Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • [libvirt-daemon-common]Not affected

    Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · all · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · all · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (4)
    • 9.0.0-4+deb12u2 · amd64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 9.0.0-4+deb12u2 · arm64 · bookworm

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

  • Source package: [libvirt]

    Details (2)
    • 11.3.0-2~bpo12+1 · amd64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

    • 11.3.0-2~bpo12+1 · arm64 · bookworm-backports

      Not affected

      usn · libvirt · debian · bookworm

Next results

Observed:

References