EUVD-2014-1523

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

PT-2014-4186

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1 Description The issue is related to a race condition in the virNetServerClientStartKeepAlive function. This allows remote attackers to cause a denial of service by closing a connection before a keepalive respons...

PT-2014-3438

Name of the Vulnerable Software and Affected Versions libvirt versions 1.1.1 through 1.2.0 Description The issue allows context-dependent attackers to bypass restrictions in ACLs, specifically the domain:getattr and connect:search domains restrictions, and obtain sensitive domain object...

PT-2014-3126

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1 Description The issue is related to the libxlDomainGetNumaParameters function in the libxl driver, which does not properly initialize the nodemap. This can be exploited by local users to cause a denial of servic...

PT-2014-3127

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1 Description The issue is related to multiple race conditions in certain functions within libvirt. These functions are virDomainBlockStats, virDomainGetBlockInf, qemuDomainBlockJobImpl, and virDomainGetBlockIoTun...

CVE-2013-6458

Multiple race conditions in the 1 virDomainBlockStats, 2 virDomainGetBlockInf, 3 qemuDomainBlockJobImpl, and 4 virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service libvirtd...

CVE-2014-1447

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

CVE-2013-6457

The libxlDomainGetNumaParameters function in the libxl driver libxl/libxldriver.c in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service invalid free operation and crash or possibly execute arbitrary code via an inactive domain to t...

CVE-2014-0028

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:searchdomains restrictions in ACLs and obtain sensitive domain object information via a request to the 1 virConnectDomainEventRegister and 2 virConnectDomainEventRegisterAny functions in the...

CVE-2013-6457: Undefined Security Weakness

The libxlDomainGetNumaParameters function in the libxl driver libxl/libxldriver.c in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service invalid free operation and crash or possibly execute arbitrary code via an inactive domain to t...

CVE-2014-0028: Undefined Security Weakness

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:searchdomains restrictions in ACLs and obtain sensitive domain object information via a request to the 1 virConnectDomainEventRegister and 2 virConnectDomainEventRegisterAny functions in the...

CVE-2014-1447: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

CVE-2013-6458: Concurrent Execution using Shared Resource with Improper Synchronization

Multiple race conditions in the 1 virDomainBlockStats, 2 virDomainGetBlockInf, 3 qemuDomainBlockJobImpl, and 4 virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service libvirtd...

[SECURITY] Fedora 20 Update: libvirt-1.1.3.3-1.fc20

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)

Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...

Debian DSA-2846-1 : libvirt - several vulnerabilities

Multiple security issues have been found in Libvirt, a virtualisation abstraction library : - CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. - CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denia...

[SECURITY] [DSA 2846-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2846-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2846-1 (libvirt - several vulnerabilities)

Multiple security issues have been found in Libvirt, a virtualisation abstraction library: CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denial of...

DSA-2846-1 libvirt - several

Bulletin has no description...

Debian: Security Advisory (DSA-2846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...