Lucene search

Gentoo FoundationGLSA-201412-36

HistoryDec 24, 2014 - 12:00 a.m.

libvirt: Denial of service

2014-12-2400:00:00

Gentoo Foundation

security.gentoo.org

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

47.6%

JSON

Background

libvirt is a C toolkit for manipulating virtual machines.

Description

Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details.

Impact

A context-dependent attacker may be able to cause Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All libvirt users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=app-emulation/libvirt-1.2.10-r3"

OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-emulation/libvirt< 1.2.10-r3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Gentoo	any	all	app-emulation/libvirt	< 1.2.10-r3	UNKNOWN

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

47.6%

JSON

Related for GLSA-201412-36