Lucene search
HistorySep 30, 2013 - 9:55 p.m.
CVE-2013-4154
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.6
Confidence
High
EPSS
0.014
Percentile
86.4%
The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to “agent based cpu (un)plug,” as demonstrated by the “virsh vcpucount foobar --guest” command.
Affected configurations
Node
redhatlibvirtRange≤1.1.0
ORredhatlibvirtMatch1.0.0
ORredhatlibvirtMatch1.0.1
ORredhatlibvirtMatch1.0.2
ORredhatlibvirtMatch1.0.3
ORredhatlibvirtMatch1.0.4
ORredhatlibvirtMatch1.0.5
ORredhatlibvirtMatch1.0.6
Related
cvelist
cvelist
CVE-2013-4154
2013-09-30 21:00:00
cve
cve
CVE-2013-4154
2013-09-30 21:55:09
prion
prion
Null pointer dereference
2013-09-30 21:55:00
ubuntucve
ubuntucve
CVE-2013-4154
2013-09-30 00:00:00
debiancve
debiancve
CVE-2013-4154
2013-09-30 21:55:09
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.1.1-alt1
2013-08-08 00:00:00
osv
osv
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
7.6
Confidence
High
EPSS
0.014
Percentile
86.4%
Related for NVD:CVE-2013-4154