CVE-2013-6457

2014-01-2418:55:04

Debian Security Bug Tracker

security-tracker.debian.org

0.0004 Low

EPSS

Percentile

5.2%

JSON

The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.

OSVersionArchitecturePackageVersionFilename
Debian12alllibvirt< 1.2.1-1libvirt_1.2.1-1_all.deb
Debian11alllibvirt< 1.2.1-1libvirt_1.2.1-1_all.deb
Debian10alllibvirt< 1.2.1-1libvirt_1.2.1-1_all.deb
Debian999alllibvirt< 1.2.1-1libvirt_1.2.1-1_all.deb
Debian13alllibvirt< 1.2.1-1libvirt_1.2.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libvirt	< 1.2.1-1	libvirt_1.2.1-1_all.deb
Debian	11	all	libvirt	< 1.2.1-1	libvirt_1.2.1-1_all.deb
Debian	10	all	libvirt	< 1.2.1-1	libvirt_1.2.1-1_all.deb
Debian	999	all	libvirt	< 1.2.1-1	libvirt_1.2.1-1_all.deb
Debian	13	all	libvirt	< 1.2.1-1	libvirt_1.2.1-1_all.deb

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for DEBIANCVE:CVE-2013-6457