Gentoo Security Advisory GLSA 201412-36

Gentoo Linux Local Security Checks GLSA 201412-36 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Oracle Linux 7 : libvirt (ELSA-2015-0323)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0323 advisory. - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs CVE-2014-8136 - CVE-2015-0236: qemu: Check ACLs when dumping security info from sa...

Fedora Update for libvirt FEDORA-2015-1892

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8131

The qemu implementation of virConnectGetAllDomainStats in libvirt before 1.2.11 does not properly handle locks when a domain is skipped due to ACL restrictions, which allows a remote authenticated users to cause a denial of service deadlock or segmentation fault and crash via a request to access...

CVE-2014-8131

CVE-2014-8131 affects the qemu implementation of virConnectGetAllDomainStats in libvirt up to version 1.2.10. When a domain is skipped due to ACL restrictions, locks are not handled properly, enabling a remote authenticated user to trigger a denial of service (deadlock or segmentation fault) by r...

openSUSE Security Update : libvirt (openSUSE-SU-2015:0008-1)

CVE-2014-8135: libvirt: local denial of service in storage driver 87b9437f-CVE-2014-8135.patch bsc910860 - CVE-2014-8136: libvirt: local denial of service in qemu driver 2bdcd29c-CVE-2014-8136.patch bsc910862 - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats...

GLSA-201412-36 : libvirt: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201412-36 libvirt: Denial of Service Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker may be able to cause Denial of...

Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1

Dec. 18, 2014 Alexey Shabalin 1.2.11-alt1 - 1.2.11 - fixed CVE-2014-7823,CVE-2014-8135,CVE-2014-8136,CVE-2014-8131...