Download
| Alert*
[3.6] libvirt: TLS certificate verification disabled for clients (CVE-2017-1000256)
libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.
|