SUSE: Security Advisory (SUSE-SU-2014:0162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libvirt FEDORA-2015-1883

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0010-1)

CVE-2013-6436: Fix crashes in lxc memtune code, one of which results in DoS f8c1cb90-CVE-2013-6436.patch, 9faf3f29-LXC-memtune.patch bnc854486 - Backported upstream patch to fix LXC container failing start. bnc855239 - Building with polkit support requires polkit-devel bnc854144 %NASLMINLEVEL...

Fedora Update for libvirt FEDORA-2014-6586

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package libvirt version 1.2.2-alt1

March 5, 2014 Alexey Shabalin 1.2.2-alt1 - 1.2.2 - fixed CVE-2013-6436, CVE-2013-6456, CVE-2013-6457, CVE-2013-6458, CVE-2014-1447, CVE-2014-0028 - add wireshark-plugin-libvirt package, but disabled now...

Ubuntu: Security Advisory (USN-2093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : libvirt-1.0.5.9-1.fc19 (2014-1090)

Rebased to version 1.0.5.9 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436 libvirt: crash in...

Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)

Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...

CVE-2013-6436

The lxcDomainGetMemoryParameters method in lxc/lxcdriver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash via a guest in the shutdown...

CVE-2013-6436

CVE-2013-6436 affects the libvirt lxc driver. The vulnerability is in lxcDomainGetMemoryParameters in libvirt before the patch/cleanup, where memory tunables are read without properly checking the LXC guest status. A local user can trigger a denial of service (NULL pointer dereference, libvirtd c...

libvirt "lxcDomainGetMemoryParameters()"拒绝服务漏洞

CVE ID:CVE-2013-6436 Libvirt库是一款实现Linux虚拟化功能的Linux API，它支持各种Hypervisor，包括Xen和KVM，以及QEMU和用于其他操作系统的一些虚拟产品。 Libvirt中"lxcDomainGetMemoryParameters"函数lxc/lxcdriver.c存在一些错误，允许攻击者利用漏洞向没有运行的LXC域发送"virsh memtune"命令触发空指针引用，造成拒绝服务攻击。 0 libvirt 1.x 厂商补丁： Libvirt ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...