CNNVD-202511-1898 Information
CNNVD ID
CNNVD-202511-1898
Related CVE
- CNNVD Published: 2025-11-17
Description (Chinese)
libvirt是libvirt开源的一个用于实现Linux虚拟化功能的Linux API。它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 libvirt存在安全漏洞，该漏洞源于外部非活动快照创建为全局可读，可能导致信息泄露。
Description (English)
Libvirt is a Linux API for the Linux virtualization function. It supports various Hypervisor, including Xen and KVM, as well as QEMU and some virtual products for other operating systems. Libvirt had a security loophole, which stemmed from the creation of an external inactive snapshot that could lead to a leak of information.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
libvirt
Published
2025-11-17
Last Modified
2026-02-24
References
https://bugzilla.redhat.com/show_bug.cgi?id=2415409 https://access.redhat.com/security/cve/CVE-2025-13193 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13193 https://vigilance.fr/vulnerability/libvirt-information-disclosure-via-Inactive-Snapshots-49062
Share on: