CVE-2014-8135

The CVE-2014-8135 issue affects libvirt up to version 1.2.11, where storageVolUpload in storage/storage_driver.c fails to check a return value. This allows local attackers to trigger a NULL pointer dereference and daemon crash via a crafted offset in the virsh vol-upload command, causing a local ...

CVE-2014-8136

CVE-2014-8136 affects libvirt via the qemu/qemu_driver.c path: qemuDomainMigratePerform and qemuDomainMigrateFinish2 do not unlock the domain when an ACL check fails, enabling a local attacker to cause a denial of service. Public references in connected advisories (e.g., USN/RHSA/CESA entries) co...

CVE-2014-8135

The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload" command...

CVE-2014-8136

The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...

PT-2014-8425 · Red Hat +1 · Libvirt +1

Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 1.2.11 Description: The issue is related to the storageVolUpload function in storage/storage driver.c, which does not check a certain return value. This allows local users to cause a denial of service, resulting in a...

PT-2014-8426 · Red Hat +4 · Libvirt +5

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: The issue is related to the qemuDomainMigratePerform and qemuDomainMigrateFinish2 functions in qemu/qemu driver.c. These functions do not unlock the domain when an ACL check fails, allowing...

Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1

Dec. 18, 2014 Alexey Shabalin 1.2.11-alt1 - 1.2.11 - fixed CVE-2014-7823,CVE-2014-8135,CVE-2014-8136,CVE-2014-8131...

Design/Logic Flaw

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

DEBIAN-CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The CVE-2013-4399 issue affects libvirt up to version 1.1.3, where remoteClientFreeFunc in daemon/remote.c fails to set an identity when ACLs are used. This can allow an attacker to deny service by registering an event handler and then closing the connection, due to a use-after-free that can cras...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

GLSA-201412-04 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-04 libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause a Denial of...

libvirt: Multiple vulnerabilities

Background libvirt is a C toolkit for manipulating virtual machines. Description Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to cause a Denial of Service or cause information leakage...

[USN-2404-1] libvirt vulnerabilities

========================================================================== Ubuntu Security Notice USN-2404-1 November 11, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

libvirt information leakage

Information access via qemuDomainFormatXML...

Fedora 20 : libvirt-1.1.3.8-1.fc20 (2014-15228)

Rebased to version 1.1.3.8 - CVE-2014-3633: out-of-bounds read in blockiotune bz 1160823 - CVE-2014-3657: Potential deadlock in domainconf bz 1160824 - CVE-2014-7823: information leak with migratable flag bz 1160822 Note that Tenable Network Security has extracted the preceding description block...

openSUSE Security Update : libvirt (openSUSE-SU-2014:1471-1)

libvirt was updated to fix one security issue. This security issue was fixed : - Security issue with migratable flag CVE-2014-7823. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...