Daniel P. Berrange

2 exploits Active since Sep 2013

CVE-2019-13313 WRITEUP HIGH STUB

libosinfo 1.5.0 - Local Credential Exposure via Command-Line Argument

libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.

CVSS 7.8

View Code

CVE-2013-2218 EXPLOITDB text WORKING POC

libvirt 1.0.6 - Denial of Service via virConnectListAllInterfaces Double Free

Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.

View Code