CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The CVE-2013-4399 issue affects libvirt up to version 1.1.3, where remoteClientFreeFunc in daemon/remote.c fails to set an identity when ACLs are used. This can allow an attacker to deny service by registering an event handler and then closing the connection, due to a use-after-free that can cras...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

CVE-2013-4399: Undefined Security Weakness

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...

GLSA-201412-04 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-04 libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause a Denial of...

libvirt: Multiple vulnerabilities

Background libvirt is a C toolkit for manipulating virtual machines. Description Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to cause a Denial of Service or cause information leakage...

[USN-2404-1] libvirt vulnerabilities

========================================================================== Ubuntu Security Notice USN-2404-1 November 11, 2014 libvirt vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...

libvirt information leakage

Information access via qemuDomainFormatXML...

Fedora 20 : libvirt-1.1.3.8-1.fc20 (2014-15228)

Rebased to version 1.1.3.8 - CVE-2014-3633: out-of-bounds read in blockiotune bz 1160823 - CVE-2014-3657: Potential deadlock in domainconf bz 1160824 - CVE-2014-7823: information leak with migratable flag bz 1160822 Note that Tenable Network Security has extracted the preceding description block...

openSUSE Security Update : libvirt (openSUSE-SU-2014:1471-1)

libvirt was updated to fix one security issue. This security issue was fixed : - Security issue with migratable flag CVE-2014-7823. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Mandriva Linux Security Advisory : libvirt (MDVSA-2014:222)

Updated libvirt packages fix security vulnerability : Eric Blake discovered that libvirt incorrectly handled permissions when processing the qemuDomainFormatXML command. An attacker with read-only privileges could possibly use this to gain access to certain information from the domain xml file...

Fedora Update for libvirt FEDORA-2014-15228

Check the version of libvirt SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868504";...

[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

MGASA-2014-0470 Updated libvirt packages fix security vulnerability

Eric Blake discovered that libvirt incorrectly handled permissions when processing the qemuDomainFormatXML command. An attacker with read-only privileges could possibly use this to gain access to certain information from the domain xml file CVE-2014-7823...

Updated libvirt packages fix security vulnerability

Eric Blake discovered that libvirt incorrectly handled permissions when processing the qemuDomainFormatXML command. An attacker with read-only privileges could possibly use this to gain access to certain information from the domain xml file CVE-2014-7823...

Oracle Linux 6 : libvirt (ELSA-2014-1873)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1873 advisory. - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk CVE-2014-3633 - domainconf: fix domain deadlock CVE-2014-3657 Tenable has...

CentOS 6 : libvirt (CESA-2014:1873)

Updated libvirt packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS Update for libvirt CESA-2014:1873 centos6

Check the version of libvirt SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882087";...

RHEL 6 : libvirt (RHSA-2014:1873)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1873 advisory. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...