CVE:CVE-2015-0236
CNNVD:CNNVD-201501-688
Red Hat libvirt是美国红帽（Red Hat）公司的一个用于实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。
libvirt 1.2.12之前版本中存在信息泄露漏洞，该漏洞源于没有充分过滤VIR_DOMAIN_XML_SECURE标志。远程攻击者可借助特制的快照或镜像利用该漏洞获取VNC密码。
solution:Upgrade mageia mageia to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat libvirt to a higher version than 1.2.11,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,and avoid the version (,1.2.11],1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0