| Package | Affected versions | Patched versions |
|---|---|---|
| libvirt | ≤ 1.3.5 |
libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free