3.3 Low
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:L/Au:N/C:N/I:N/A:P
0.021 Low
EPSS
Percentile
89.0%
Debian Security Advisory DSA-2846-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
January 17, 2014 http://www.debian.org/security/faq
Package : libvirt
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2013-6458 CVE-2014-1447
Multiple security issues have been found in Libvirt, a virtualisation
abstraction library:
CVE-2013-6458
It was discovered that insecure job usage could lead to denial of
service against libvirtd.
CVE-2014-1447
It was discovered that a race condition in keepalive handling could
lead to denial of service against libvirtd.
For the stable distribution (wheezy), these problems have been fixed in
version 0.9.12.3-1. This bugfix point release also addresses some
additional bugfixes.
For the unstable distribution (sid), these problems have been fixed in
version 1.2.1-1.
We recommend that you upgrade your libvirt packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | kfreebsd-i386 | libvirt-bin | <Â 0.9.12.3-1 | libvirt-bin_0.9.12.3-1_kfreebsd-i386.deb |
Debian | 7 | kfreebsd-amd64 | libvirt0-dbg | <Â 0.9.12.3-1 | libvirt0-dbg_0.9.12.3-1_kfreebsd-amd64.deb |
Debian | 7 | ia64 | python-libvirt | <Â 0.9.12.3-1 | python-libvirt_0.9.12.3-1_ia64.deb |
Debian | 7 | i386 | libvirt0 | <Â 0.9.12.3-1 | libvirt0_0.9.12.3-1_i386.deb |
Debian | 7 | s390x | python-libvirt | <Â 0.9.12.3-1 | python-libvirt_0.9.12.3-1_s390x.deb |
Debian | 7 | s390 | libvirt-bin | <Â 0.9.12.3-1 | libvirt-bin_0.9.12.3-1_s390.deb |
Debian | 7 | mipsel | libvirt0-dbg | <Â 0.9.12.3-1 | libvirt0-dbg_0.9.12.3-1_mipsel.deb |
Debian | 7 | amd64 | libvirt0 | <Â 0.9.12.3-1 | libvirt0_0.9.12.3-1_amd64.deb |
Debian | 7 | i386 | libvirt-dev | <Â 0.9.12.3-1 | libvirt-dev_0.9.12.3-1_i386.deb |
Debian | 7 | mips | libvirt-dev | <Â 0.9.12.3-1 | libvirt-dev_0.9.12.3-1_mips.deb |