libguestfs libguestfs

Name: libguestfs libguestfs
Brand: libguestfs

productUS

cpe:2.3:a:libguestfs:libguestfs:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high4medium1low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-2124US	medium4.3	2.60% (85th)	—	no fix	2014-05-27	49 versions
CVE-2022-2211US	medium6.5	0.97% (62nd)	—	no fix	2022-07-12	—
CVE-2013-4419US	medium6.8	0.75% (55th)	—	no fix	2013-11-05	2 versions
CVE-2012-2690US	low2.1	0.41% (35th)	—	no fix	2012-06-29	71 versions
CVE-2010-3851US	medium4.7	0.37% (31st)	—	no fix	2010-11-04	23 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-255CWE-2551 CVEs
CWE-264CWE-2641 CVEs
CWE-377Insecure Temporary File1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.