CVE-2019-3886

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

• CWE-862
• CWE-862

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/107777Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2019:3723Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/
• https://usn.ubuntu.com/4021-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00105.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/107777Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHBA-2019:3723Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3886Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYMNKXAUBZCFBBPFH64FJPH5EJH4GSU2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5DHYIFECZ7BMVXK4EP4FDFZXK7I5MZH/
• https://usn.ubuntu.com/4021-1/Third Party Advisory

Published

Apr 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3880A flaw was found in the way samba implemented an RPC endpoin…5.4
• CVE-2019-3881Bundler prior to 2.1.0 uses a predictable path in /tmp/, cre…7.8
• CVE-2019-3882A flaw was found in the Linux kernel's vfio interface implem…5.5
• CVE-2019-3883In 389-ds-base up to version 1.4.1.2, requests are handled b…7.5
• CVE-2019-3884A vulnerability exists in the garbage collection mechanism o…5.4
• CVE-2019-3885A use-after-free flaw was found in pacemaker up to and inclu…3.3
• CVE-2019-3887A flaw was found in the way KVM hypervisor handled x2APIC Ma…5.6
• CVE-2019-3888A vulnerability was found in Undertow web server before 2.0.…9.8
• CVE-2019-3889A reflected XSS vulnerability exists in authorization flow o…5.4
• CVE-2019-3890It was discovered evolution-ews before 3.31.3 does not check…8.1
• CVE-2019-3891It was discovered that a world-readable log file belonging t…7.8
• CVE-2019-3892Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…