libvirt "lxcDomainGetMemoryParameters()"拒绝服务漏洞

CVE ID:CVE-2013-6436 Libvirt库是一款实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Libvirt中"lxcDomainGetMemoryParameters"函数lxc/lxcdriver.c存在一些错误，允许攻击者利用漏洞向没有运行的LXC域发送"virsh memtune"命令触发空指针引用，造成拒绝服务攻击。 0 libvirt 1.x 厂商补丁： Libvirt ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

DEBIAN-CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

Command injection

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

CVE-2013-4400

CVE-2013-4400 affects libvirt up to 1.1.3 (1.1.2–1.1.3). Local users can overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments in virt-login-shell. Public references in multiple advisories confirm affected versions and a need to upg...

CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

Moderate: Red Hat Bug Fix Advisory: libvirt bug fix and enhancement update

Updated libvirt packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 6. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools...

Ubuntu Update for libvirt USN-2026-1

Check for the Version of libvirt OpenVAS Vulnerability Test $Id: gbubuntuUSN20261.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for libvirt USN-2026-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

[USN-2026-1] libvirt vulnerability

========================================================================== Ubuntu Security Notice USN-2026-1 November 11, 2013 libvirt vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Libvirt code privilege escalation

virConnectDomainXMLToNative invalid privileges check...

Ubuntu: Security Advisory (USN-2026-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: libvirt-1.1.3.1-1.fc20

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Ubuntu 13.10 : libvirt vulnerability (USN-2026-1)

It was discovered that libvirt incorrectly checked privileges when the virConnectDomainXMLToNative API function was used. An attacker could possibly use this flaw to gain write privileges, contrary to expected behaviour. Note that Tenable Network Security has extracted the preceding description...

Fedora 20 : libvirt-1.1.3.1-1.fc20 (2013-20869)

Rebased to version 1.1.3.1 - CVE-2013-4400: virt-login-shell arbitrary file overwrites vulnerability bz 1015228, bz 1025685 - Fix possible domain disappearance on libvirtd crash bz 1015246 - Fix LXC container startup failure bz 1014847 - Slim down libvirt LXC dependencies bz 1012198 Note that...

USN-2026-1: libvirt vulnerability

It was discovered that libvirt incorrectly checked privileges when the virConnectDomainXMLToNative API function was used. An attacker could possibly use this flaw to gain write privileges, contrary to expected behaviour...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 8421)

libvirt has been updated to the 1.0.5.6 stable release that fixes bugs and security issues : - Fix crash in remoteDispatchDomainMemoryStats. CVE-2013-4296 - virBitmapParse out-of-bounds read access Libvirt on SLES 11 SP3 is not affected:. CVE-2013-5651 - Add support for using 3-arg pkcheck syntax...

SuSE 11.2 Security Update : libvirt (SAT Patch Number 8348)

This libvirt update fixes a security issue. - EMBARGOED: libvirt: Fix crash in remoteDispatchDomainMemoryStats. bnc838638: CVE-2013-4296 - Regression: vm-install fails to display on SLES 11 SP2 UV2000. bnc817008 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...