Lucene search

K
archlinuxArch LinuxASA-201409-5
HistorySep 29, 2014 - 12:00 a.m.

libvirt: out-of-bounds read access

2014-09-2900:00:00
Arch Linux
lists.archlinux.org
17

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.028 Low

EPSS

Percentile

89.5%

Luyao Huang of Red Hat found that the qemu implementation of
virDomainGetBlockIoTune computed an index into the array of disks
for the live definition, then used it as the index into the array of
disks for the persistent definition, which could result into an
out-of-bounds read access in qemuDomainGetBlockIoTune().

OSVersionArchitecturePackageVersionFilename
anyanyanylibvirt< 1.2.8-2UNKNOWN

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.028 Low

EPSS

Percentile

89.5%