CVE-2016-10746

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.3.1

Description The issue allows guest agents with a read-only (RO) connection to make virDomainGetTime API calls, which were supposed to require a read-write (RW) connection. This is a distinct issue from other known vulnerabilities.

Recommendations For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the virDomainGetTime API to minimize the risk of exploitation.