CVE-2013-4292: Undefined Security Weakness

libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service memory consumption via a large number of domain migrate parameters in certain RPC calls in 1 daemon/remote.c and 2 remote/remotedriver.c...

CVE-2013-4239: Improper Restriction of Operations within the Bounds of a Memory Buffer

The xenDaemonListDefinedDomains function in xen/xendinternal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service memory corruption and crash via vectors involving the virConnectListDefinedDomains API function...

CVE-2013-4154: Undefined Security Weakness

The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service NULL pointer dereference and crash via vectors related to "agent based cpu unplug," as demonstrated by the "virsh vcpucount foobar --guest" command...

CVE-2013-5651: Improper Restriction of Operations within the Bounds of a Memory Buffer

The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via a crafted bitmap, as demonstrated by a large nodeset value to numatune...

CVE-2013-4297: Improper Restriction of Operations within the Bounds of a Memory Buffer

The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service uninitialized pointer dereference and crash via unspecified vectors...

CVE-2013-2218: Undefined Security Weakness

Double free vulnerability in the virConnectListAllInterfaces method in interface/interfacebackendnetcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service libvirtd crash via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list...

CVE-2013-4296: Improper Restriction of Operations within the Bounds of a Memory Buffer

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and crash via a crafted RPC ca...

CVE-2013-2230: Improper Input Validation

The qemu driver qemu/qemudriver.c in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service daemon crash via unspecified vectors involving "multiple events registration."...

CVE-2013-4291: Undefined Security Weakness

The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges...

CVE-2013-4153: Undefined Security Weakness

Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemuagent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service daemon crash via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command...

PT-2013-3609

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.1.1 Description The issue allows remote authenticated users to cause a denial of service, resulting in a daemon crash. This is achieved through unspecified vectors involving multiple events registration in the qemu...

PT-2013-5713

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.1.2 Description The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted bitmap. This can be achieved by providing a large nodeset value ...

PT-2013-4874

Name of the Vulnerable Software and Affected Versions libvirt versions 1.0.6 through 1.1.0 Description The issue is related to a double free vulnerability in the qemuAgentGetVCPUs function. This vulnerability can be exploited by remote attackers to cause a denial of service, specifically a daemon...

Debian DSA-2764-1 : libvirt - programming error

Daniel P. Berrange discovered that incorrect memory handling in the remoteDispatchDomainMemoryStats function could lead to denial of service. The oldstable distribution squeeze is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

GLSA-201309-18 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201309-18 libvirt: Multiple vulnerabilities An error in the virNetMessageFree function in rpc/virnetserverclient.c can lead to a use-after-free. Additionally, a socket leak in the remoteDispatchStoragePoolListAllVolumes command ca...

[SECURITY] [DSA 2764-1] libvirt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2764-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 25, 2013 http://www.debian.org/security/faq -...

DSA-2764-1 libvirt - programming error

Bulletin has no description...

Debian Security Advisory DSA 2764-1 (libvirt - programming error)

Daniel P. Berrange discovered that incorrect memory handling in the remoteDispatchDomainMemoryStats function could lead to denial of service. The oldstable distribution squeeze is not affected. OpenVAS Vulnerability Test $Id: deb2764.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from...

libvirt: Multiple vulnerabilities

Background libvirt is a C toolkit for manipulating virtual machines. Description An error in the virNetMessageFree function in rpc/virnetserverclient.c can lead to a use-after-free. Additionally, a socket leak in the remoteDispatchStoragePoolListAllVolumes command can lead to file descriptor...

RedHat Update for libvirt RHSA-2013:1272-01

Check for the Version of libvirt OpenVAS Vulnerability Test RedHat Update for libvirt RHSA-2013:1272-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...