Lucene search

K
nvd[email protected]NVD:CVE-2013-7336
HistoryMay 07, 2014 - 10:55 a.m.

CVE-2013-7336

2014-05-0710:55:03
web.nvd.nist.gov
6

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%

The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function.

Affected configurations

Nvd
Node
redhatlibvirtRange≀1.1.2
OR
redhatlibvirtMatch1.0.0
OR
redhatlibvirtMatch1.0.1
OR
redhatlibvirtMatch1.0.2
OR
redhatlibvirtMatch1.0.3
OR
redhatlibvirtMatch1.0.4
OR
redhatlibvirtMatch1.0.5
OR
redhatlibvirtMatch1.0.5.1
OR
redhatlibvirtMatch1.0.5.2
OR
redhatlibvirtMatch1.0.5.3
OR
redhatlibvirtMatch1.0.5.4
OR
redhatlibvirtMatch1.0.5.5
OR
redhatlibvirtMatch1.0.5.6
OR
redhatlibvirtMatch1.0.6
OR
redhatlibvirtMatch1.1.0
OR
redhatlibvirtMatch1.1.1
OR
opensuseopensuseMatch13.1

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%