CVE-2015-0236

Published: Jan 29, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

Affected (21)

Products: Mageia: Mageia · Redhat: Libvirt, Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation · Canonical: Ubuntu Linux

1 product

5 products

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Canonical

1 product

Ubuntu Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mageia Mageia	Version 4.0

Configuration B

12 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Libvirt	Up to 1.2.11
Redhat Libvirt	Version 1.2.0
Redhat Libvirt	Version 1.2.10
Redhat Libvirt	Version 1.2.1
Redhat Libvirt	Version 1.2.2
Redhat Libvirt	Version 1.2.3
Redhat Libvirt	Version 1.2.4
Redhat Libvirt	Version 1.2.5
Redhat Libvirt	Version 1.2.6
Redhat Libvirt	Version 1.2.7
Redhat Libvirt	Version 1.2.8
Redhat Libvirt	Version 1.2.9

Running on/with	Platform Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04
Canonical Ubuntu Linux	Version 15.10

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0