The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka     RBD), which allows local users to obtain sensitive information via a process listing. (CVE-2015-5160)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-880:04 advisory.

    Libvirt is a C toolkit to interact with the virtualization capabilities     of recent versions of Linux (and other OSes). The main package includes     the libvirtd server exporting the virtualization support.
    Security issues fixed with this release:
    CVE-2015-5160
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-5313     Directory traversal vulnerability in the     virStorageBackendFileSystemVolCreate function in     storage/storage_backend_fs.c in libvirt, when fine-grained Access     Control Lists (ACL) are in effect, allows local users with     storage_vol:create ACL but not domain:write permission to write to     arbitrary files via a .. (dot dot) in a volume name.
    CVE-2016-5008     libvirt before 2.0.0 improperly disables password checking when the     password on a VNC server is set to an empty string, which allows     remote attackers to bypass authentication and establish a VNC session     by connecting to the server.
    The following packages have been upgraded to a newer upstream version: libvirt (2.0.0).
    Additional Changes:

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems.
In addition, libvirt provides tools for remote management of virtualized systems.

The following packages have been upgraded to a newer upstream version:
libvirt (2.0.0). (BZ#830971, BZ#1286679)

Security Fix(es) :

* It was found that the libvirt daemon, when using RBD (RADOS Block Device), leaked private credentials to the process list. A local attacker could use this flaw to perform certain privileged operations within the cluster. (CVE-2015-5160)

* A path-traversal flaw was found in the way the libvirt daemon handled filesystem names for storage volumes. A libvirt user with privileges to create storage volumes and without privileges to create and modify domains could possibly use this flaw to escalate their privileges. (CVE-2015-5313)

* It was found that setting a VNC password to an empty string in libvirt did not disable all access to the VNC server as documented, instead it allowed access with no authentication required. An attacker could use this flaw to access a VNC server with an empty VNC password without any authentication. (CVE-2016-5008)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

The following packages have been upgraded to a newer upstream version:
libvirt (2.0.0).

Security Fix(es) :

  - It was found that the libvirt daemon, when using RBD     (RADOS Block Device), leaked private credentials to the     process list. A local attacker could use this flaw to     perform certain privileged operations within the     cluster. (CVE-2015-5160)

  - A path-traversal flaw was found in the way the libvirt     daemon handled filesystem names for storage volumes. A     libvirt user with privileges to create storage volumes     and without privileges to create and modify domains     could possibly use this flaw to escalate their     privileges. (CVE-2015-5313)

  - It was found that setting a VNC password to an empty     string in libvirt did not disable all access to the VNC     server as documented, instead it allowed access with no     authentication required. An attacker could use this flaw     to access a VNC server with an empty VNC password     without any authentication. (CVE-2016-5008)

ID	Name	Product	Family	Published	Updated	Severity
218965	Linux Distros Unpatched Vulnerability : CVE-2015-5160	Nessus	Misc.	3/4/2025	9/14/2025	medium
289532	MiracleLinux 7 : libvirt-2.0.0-10.el7 (AXSA:2016-880:04)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
94540	RHEL 7 : libvirt (RHSA-2016:2577)	Nessus	Red Hat Local Security Checks	11/4/2016	1/20/2026	critical
94700	Oracle Linux 7 : libvirt (ELSA-2016-2577)	Nessus	Oracle Linux Local Security Checks	11/11/2016	11/1/2024	critical
95324	CentOS 7 : libvirt (CESA-2016:2577)	Nessus	CentOS Local Security Checks	11/28/2016	1/4/2021	critical
95846	Scientific Linux Security Update : libvirt on SL7.x x86_64 (20161103)	Nessus	Scientific Linux Local Security Checks	12/15/2016	1/14/2026	critical

Detections

Analytics

Plugins Search

medium

critical

critical

critical

critical

critical