Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3657
HistoryOct 06, 2014 - 2:55 p.m.

CVE-2014-3657

2014-10-0614:55:00
CWE-399
[email protected]
web.nvd.nist.gov
44
nvd
cve-2014-3657
information security
libvirt
denial of service
remote attackers
deadlock
api command

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.042 Low

EPSS

Percentile

92.2%

JSON

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

Related

prion 1
veracode 1
ubuntucve 1
debiancve 1
cvelist 1
openvas 12
redhat 2
securityvulns 4
nessus 15
mageia 1
altlinux 1
oraclelinux 3
ubuntu 1
centos 2
fedora 2
f5 2
osv 15
prion
prion
Command injection
2014-10-06 14:55:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:58:48
ubuntucve
ubuntucve
CVE-2014-3657
2014-10-06 00:00:00
debiancve
debiancve
CVE-2014-3657
2014-10-06 14:55:00
cvelist
cvelist
CVE-2014-3657
2014-10-06 14:00:00
openvas
openvas
RedHat Update for libvirt RHSA-2014:1352-01
2014-10-02 00:00:00
Mageia: Security Advisory (MGASA-2014-0401)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2404-1)
2014-11-12 00:00:00
redhat
redhat
(RHSA-2014:1352) Moderate: libvirt security and bug fix update
2014-10-01 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
securityvulns
securityvulns
libvirt information leakage
2014-11-24 00:00:00
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
[ MDVSA-2014:195 ] libvirt
2014-10-05 00:00:00
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2014:1293-1)
2014-10-15 00:00:00
Oracle Linux 7 : libvirt (ELSA-2014-1352)
2014-10-02 00:00:00
RHEL 7 : libvirt (RHSA-2014:1352)
2014-10-02 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerbilities
2014-10-07 13:22:51
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.9-alt1
2014-10-03 00:00:00
oraclelinux
oraclelinux
libvirt security and bug fix update
2014-10-01 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
centos
centos
libvirt security update
2014-10-03 18:13:17
libvirt security update
2014-11-18 18:46:17
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
osv
osv
CVE-2020-25637
2020-10-06 14:15:12
CVE-2020-12430
2020-04-28 20:15:12
CVE-2020-10701
2021-05-27 19:15:07

6.1 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.042 Low

EPSS

Percentile

92.2%

JSON
Related for CVE-2014-3657
prion1veracode1ubuntucve1debiancve1cvelist1openvas12redhat2securityvulns4nessus15mageia1altlinux1oraclelinux3ubuntu1centos2fedora2f52osv15