What’s Vulnerable › Vulnerabilities

CVE-2019-10132

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-22 · updated 2026-06-17
• Weakness: CWE-732

Description

A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the virtlockd and virtlogd daemons.

Affected products

• Fedoraproject Fedora: all versions
• libvirt: through 4.1.0

References

• https://access.redhat.com/errata/RHSA-2019:1264
• https://access.redhat.com/errata/RHSA-2019:1268
• https://access.redhat.com/errata/RHSA-2019:1455
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10132
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5RANC4LWZQRVJGJHVWCU6R4CCXQMDD4L/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/
• https://security.libvirt.org/2019/0003.html
• https://usn.ubuntu.com/4021-1/
• https://access.redhat.com/errata/RHSA-2019:1264
• https://access.redhat.com/errata/RHSA-2019:1268
• https://access.redhat.com/errata/RHSA-2019:1455
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10132

Get alerted when CVE-2019-10132 or the next vulnerability affects your stack