Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3657HistoryOct 06, 2014 - 2:55 p.m.
CVE-2014-3657
2014-10-0614:55:00
Debian Security Bug Tracker
security-tracker.debian.org
14
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.042 Low
EPSS
Percentile
92.2%
The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libvirt | < 1.2.9-1 | libvirt_1.2.9-1_all.deb |
| Debian | 11 | all | libvirt | < 1.2.9-1 | libvirt_1.2.9-1_all.deb |
| Debian | 10 | all | libvirt | < 1.2.9-1 | libvirt_1.2.9-1_all.deb |
| Debian | 999 | all | libvirt | < 1.2.9-1 | libvirt_1.2.9-1_all.deb |
| Debian | 13 | all | libvirt | < 1.2.9-1 | libvirt_1.2.9-1_all.deb |
Related
prion
prion
Command injection
2014-10-06 14:55:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:58:48
ubuntucve
ubuntucve
CVE-2014-3657
2014-10-06 00:00:00
cve
cve
CVE-2014-3657
2014-10-06 14:55:00
cvelist
cvelist
CVE-2014-3657
2014-10-06 14:00:00
openvas
openvas
RedHat Update for libvirt RHSA-2014:1352-01
2014-10-02 00:00:00
Ubuntu: Security Advisory (USN-2404-1)
2014-11-12 00:00:00
Oracle: Security Advisory (ELSA-2014-1352)
2015-10-06 00:00:00
redhat
redhat
(RHSA-2014:1352) Moderate: libvirt security and bug fix update
2014-10-01 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
nessus
nessus
RHEL 7 : libvirt (RHSA-2014:1352)
2014-10-02 00:00:00
CentOS 7 : libvirt (CESA-2014:1352)
2014-10-06 00:00:00
openSUSE Security Update : libvirt (openSUSE-SU-2014:1290-1)
2014-10-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.9-alt1
2014-10-03 00:00:00
oraclelinux
oraclelinux
libvirt security and bug fix update
2014-10-01 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
securityvulns
securityvulns
libvirt information leakage
2014-11-24 00:00:00
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
[ MDVSA-2014:195 ] libvirt
2014-10-05 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerbilities
2014-10-07 13:22:51
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
centos
centos
libvirt security update
2014-10-03 18:13:17
libvirt security update
2014-11-18 18:46:17
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
osv
osv
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.042 Low
EPSS
Percentile
92.2%
Related for DEBIANCVE:CVE-2014-3657