libvirt (SUSE:Linux Enterprise Module for Server Applications 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Server Applications 15 SP7 package libvirt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (20)

• CVE-2024-11595 — CVSS 7.8 (high): FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted…
• CVE-2024-11596 — CVSS 7.8 (high): ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file
• CVE-2024-9780 — CVSS 7.8 (high): ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file
• CVE-2024-9781 — CVSS 7.8 (high): AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted…
• CVE-2025-13499 — CVSS 7.8 (high): Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service
• CVE-2025-1492 — CVSS 7.8 (high): Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or…
• CVE-2025-5601 — CVSS 7.8 (high): Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture…
• CVE-2025-9817 — CVSS 7.8 (high): SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service
• CVE-2025-13945 — CVSS 5.5 (medium): HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service
• CVE-2025-13946 — CVSS 5.5 (medium): MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service
• CVE-2026-3203 — CVSS 5.5 (medium): RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
• CVE-2026-0961 — CVSS 5.5 (medium): BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
• CVE-2025-12748 — CVSS 5.5 (medium): A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before…
• CVE-2025-13193 — CVSS 5.5 (medium): A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible…
• CVE-2025-13674 — CVSS 5.5 (medium): BPv7 dissector crash in Wireshark 4.6.0 allows denial of service
• CVE-2026-0962 — CVSS 5.3 (medium): SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
• CVE-2026-0959 — CVSS 5.3 (medium): IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service
• CVE-2026-3201 — CVSS 4.7 (medium): USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service
• CVE-2026-3202 — CVSS 4.7 (medium): NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service
• CVE-2026-0960 — CVSS 4.7 (medium): HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service