CVE-2019-10166

It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.

• CWE-284

• https://access.redhat.com/libvirt-privesc-vulnerabilitiesVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10166Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/202003-18Third Party Advisory
• https://access.redhat.com/libvirt-privesc-vulnerabilitiesVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10166Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/202003-18Third Party Advisory

Published

Aug 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10160A security regression of CVE-2019-9636 was discovered in pyt…9.8
• CVE-2019-10161It was discovered that libvirtd before versions 4.10.1 and 5…7.8
• CVE-2019-10162A vulnerability has been found in PowerDNS Authoritative Ser…7.5
• CVE-2019-10163A Vulnerability has been found in PowerDNS Authoritative Ser…4.3
• CVE-2019-10164PostgreSQL versions 10.x before 10.9 and versions 11.x befor…8.8
• CVE-2019-10165OpenShift Container Platform before version 4.1.3 writes OAu…2.3
• CVE-2019-10167The virConnectGetDomainCapabilities() libvirt API, versions …7.8
• CVE-2019-10168The virConnectBaselineHypervisorCPU() and virConnectCompareH…7.8
• CVE-2019-10169A flaw was found in Keycloak’s user-managed access interface…7.2
• CVE-2019-1017An elevation of privilege vulnerability exists in Windows wh…7
• CVE-2019-10170A flaw was found in the Keycloak admin console, where the re…7.2
• CVE-2019-10171It was found that the fix for CVE-2018-14648 in 389-ds-base,…7.5