libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"source": "CPE_STRING",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"vendor_product": "debian:debian_linux"
}
]
}{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.3.1"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
],
"cpe": "cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*"
}
"2026-07-08T12:43:16Z"
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10746.json"
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"41479086546410823216827269675304848537",
"95011572583016116513769756471963560973",
"52930488875180050321374832732067031789",
"269036376029607363157939546713963887198"
]
},
"deprecated": false,
"id": "CVE-2016-10746-6ddf690c",
"signature_type": "Line",
"source": "https://github.com/libvirt/libvirt/commit/506e9d6c2d4baaf580d489fff0690c0ff2ff588f",
"signature_version": "v1",
"target": {
"file": "src/libvirt-domain.c"
}
},
{
"digest": {
"function_hash": "142972570500690275321699391045603918752",
"length": 470.0
},
"deprecated": false,
"id": "CVE-2016-10746-e63744ac",
"signature_type": "Function",
"source": "https://github.com/libvirt/libvirt/commit/506e9d6c2d4baaf580d489fff0690c0ff2ff588f",
"signature_version": "v1",
"target": {
"file": "src/libvirt-domain.c",
"function": "virDomainGetTime"
}
}
]
{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.3.1"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*"
}