Lucene search

[email protected]NVD:CVE-2012-4423

HistoryNov 19, 2012 - 12:10 p.m.

CVE-2012-4423

2012-11-1912:10:52

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.13 Low

EPSS

Percentile

95.6%

JSON

The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a “gap” in the RPC dispatch table.

Affected configurations

NVD

Node

redhatlibvirtRange≤0.10.1

redhatlibvirtMatch0.0.1

redhatlibvirtMatch0.0.2

redhatlibvirtMatch0.0.3

redhatlibvirtMatch0.0.4

redhatlibvirtMatch0.0.5

redhatlibvirtMatch0.0.6

redhatlibvirtMatch0.1.0

redhatlibvirtMatch0.1.1

redhatlibvirtMatch0.1.3

redhatlibvirtMatch0.1.4

redhatlibvirtMatch0.1.5

redhatlibvirtMatch0.1.6

redhatlibvirtMatch0.1.7

redhatlibvirtMatch0.1.8

redhatlibvirtMatch0.1.9

redhatlibvirtMatch0.2.0

redhatlibvirtMatch0.2.1

redhatlibvirtMatch0.2.2

redhatlibvirtMatch0.2.3

redhatlibvirtMatch0.3.0

redhatlibvirtMatch0.3.1

redhatlibvirtMatch0.3.2

redhatlibvirtMatch0.3.3

redhatlibvirtMatch0.4.0

redhatlibvirtMatch0.4.1

redhatlibvirtMatch0.4.2

redhatlibvirtMatch0.4.3

redhatlibvirtMatch0.4.4

redhatlibvirtMatch0.4.5

redhatlibvirtMatch0.4.6

redhatlibvirtMatch0.5.0

redhatlibvirtMatch0.5.1

redhatlibvirtMatch0.6.0

redhatlibvirtMatch0.6.1

redhatlibvirtMatch0.6.2

redhatlibvirtMatch0.6.3

redhatlibvirtMatch0.6.4

redhatlibvirtMatch0.6.5

redhatlibvirtMatch0.7.0

redhatlibvirtMatch0.7.1

redhatlibvirtMatch0.7.2

redhatlibvirtMatch0.7.3

redhatlibvirtMatch0.7.4

redhatlibvirtMatch0.7.5

redhatlibvirtMatch0.7.6

redhatlibvirtMatch0.7.7

redhatlibvirtMatch0.8.0

redhatlibvirtMatch0.8.1

redhatlibvirtMatch0.8.2

redhatlibvirtMatch0.8.3

redhatlibvirtMatch0.8.4

redhatlibvirtMatch0.8.5

redhatlibvirtMatch0.8.6

redhatlibvirtMatch0.8.7

redhatlibvirtMatch0.8.8

redhatlibvirtMatch0.9.0

redhatlibvirtMatch0.9.1

redhatlibvirtMatch0.9.2

redhatlibvirtMatch0.9.3

redhatlibvirtMatch0.9.4

redhatlibvirtMatch0.9.5

redhatlibvirtMatch0.9.6

redhatlibvirtMatch0.9.7

redhatlibvirtMatch0.9.8

redhatlibvirtMatch0.9.9

redhatlibvirtMatch0.9.10

redhatlibvirtMatch0.9.11

redhatlibvirtMatch0.9.12

redhatlibvirtMatch0.9.13

redhatlibvirtMatch0.10.0

References

libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7ff9e696063189a715802d081d55a398663c15a

libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=f8fbeb50d52520a109d71c8566fed2ea600650ec

lists.fedoraproject.org/pipermail/package-announce/2012-October/089976.html

lists.fedoraproject.org/pipermail/package-announce/2012-October/090121.html

lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html

rhn.redhat.com/errata/RHSA-2012-1359.html

www.openwall.com/lists/oss-security/2012/09/13/14

www.securityfocus.com/bid/55541

www.securitytracker.com/id?1027649

www.ubuntu.com/usn/USN-1708-1

bugzilla.redhat.com/show_bug.cgi?id=857133

www.redhat.com/archives/libvir-list/2012-September/msg00843.html

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.13 Low

EPSS

Percentile

95.6%

JSON

Related for NVD:CVE-2012-4423

openvas20 oraclelinux1 nessus10 prion1 ubuntucve1 cvelist1 debiancve1 cve1 centos1 veracode1 redhat2 ubuntu1 securityvulns2 fedora5 suse2 osv16