ENV-CVE-2021-3975

ENV-CVE-2021-3975 — libvirt 漏洞复现环境 本仓库是 CVE-2021-3975 （libvirt qemuProcessHandleMonitorEOF use-after-free，CWE-416）的 可复现漏洞环境快照，从对应的容器镜像 yan5ui/cve-2021-3975:tier1（基于 ubuntu:20.04）中导出。 环境在漏洞版本源码 上完成了一次可复现构建，并保留了编译产物、构建脚本与完整构建日志， 可直接用于漏洞复现与 exploit 验证。 漏洞信息 项| 值 ---|--- CVE| CVE-2021-3975 项目|...

NewStart CGSL MAIN 6.06 (SP) : libvirt Vulnerability (NS-SA-2026-0022)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libvirt packages installed that are affected by a vulnerability: - An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the...

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

...

libvirt: segmentation fault during VM shutdown can lead to vdsm hang

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down...