Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-0170
HistoryFeb 08, 2013 - 8:55 p.m.

CVE-2013-0170

2013-02-0820:55:00
CWE-416
[email protected]
web.nvd.nist.gov
48
cve-2013-0170
vulnerability
libvirt
rpc
denial of service
crash
execute arbitrary code
nvd

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

References

Related

fedora 5
nessus 12
redhat 1
oraclelinux 2
veracode 2
prion 1
debiancve 1
openvas 24
suse 3
ubuntucve 1
centos 1
ubuntu 1
gentoo 1
securityvulns 2
osv 16
fedora
fedora
[SECURITY] Fedora 18 Update: libvirt-0.10.2.3-1.fc18
2013-02-05 16:55:04
[SECURITY] Fedora 18 Update: libvirt-0.10.2.5-1.fc18
2013-05-29 00:52:13
[SECURITY] Fedora 16 Update: libvirt-0.9.6.4-1.fc16
2013-02-08 02:07:48
nessus
nessus
Fedora 18 : libvirt-0.10.2.3-1.fc18 (2013-1644)
2013-02-06 00:00:00
Oracle Linux 6 : libvirt (ELSA-2013-0199)
2013-07-12 00:00:00
openSUSE Security Update : libvirt (openSUSE-SU-2013:0275-1)
2014-06-13 00:00:00
redhat
redhat
(RHSA-2013:0199) Important: libvirt security update
2013-01-28 00:00:00
oraclelinux
oraclelinux
libvirt security update
2013-01-28 00:00:00
libvirt security, bug fix, and enhancement update
2013-02-27 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:54:43
Denial Of Service (DoS)
2018-07-25 09:17:44
prion
prion
Design/Logic Flaw
2013-02-08 20:55:00
debiancve
debiancve
CVE-2013-0170
2013-02-08 20:55:00
openvas
openvas
CentOS Update for libvirt CESA-2013:0199 centos6
2013-01-31 00:00:00
Fedora Update for libvirt FEDORA-2013-1644
2013-02-08 00:00:00
Oracle: Security Advisory (ELSA-2013-0199)
2015-10-06 00:00:00
suse
suse
update for libvirt (important)
2013-02-12 10:06:10
Security update for libvirt (important)
2013-02-21 18:04:26
libvirt to fix use-after-free in virNetMessageFree() (important)
2013-02-12 10:04:34
ubuntucve
ubuntucve
CVE-2013-0170
2013-01-28 00:00:00
centos
centos
libvirt security update
2013-01-28 21:41:46
ubuntu
ubuntu
libvirt vulnerabilities
2013-01-29 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2013-09-25 00:00:00
securityvulns
securityvulns
libvirt DoS vulnerabilities
2013-02-04 00:00:00
[USN-1708-1] libvirt vulnerabilities
2013-02-04 00:00:00
osv
osv
CVE-2022-0897
2022-03-25 19:15:10
CVE-2019-3840
2019-03-27 13:29:01
CVE-2016-10746
2019-04-18 16:29:00

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON
Related for CVE-2013-0170
fedora5nessus12redhat1oraclelinux2veracode2prion1debiancve1openvas24suse3ubuntucve1centos1ubuntu1gentoo1securityvulns2osv16