4517 matches found
Design/Logic Flaw
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
CVE-2014-8136
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
CVE-2014-8136
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
CVE-2014-8135
The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload" command...
CVE-2014-8136
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
CVE-2014-8135
The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload" command...
CVE-2014-8135
The CVE-2014-8135 issue affects libvirt up to version 1.2.11, where storageVolUpload in storage/storage_driver.c fails to check a return value. This allows local attackers to trigger a NULL pointer dereference and daemon crash via a crafted offset in the virsh vol-upload command, causing a local ...
CVE-2014-8135
The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload" command...
CVE-2014-8136
CVE-2014-8136 affects libvirt via the qemu/qemu_driver.c path: qemuDomainMigratePerform and qemuDomainMigrateFinish2 do not unlock the domain when an ACL check fails, enabling a local attacker to cause a denial of service. Public references in connected advisories (e.g., USN/RHSA/CESA entries) co...
CVE-2014-8135: Undefined Security Weakness
The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service NULL pointer dereference and daemon crash via a crafted offset value in a "virsh vol-upload" command...
CVE-2014-8136
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
CVE-2014-8136: Undefined Security Weakness
The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...
PT-2014-8425 · Red Hat +1 · Libvirt +1
Name of the Vulnerable Software and Affected Versions: libvirt versions prior to 1.2.11 Description: The issue is related to the storageVolUpload function in storage/storage driver.c, which does not check a certain return value. This allows local users to cause a denial of service, resulting in a...
PT-2015-4011
Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.11 Description The issue arises from the qemu implementation of virConnectGetAllDomainStats in libvirt, which fails to handle locks correctly when a domain is skipped due to ACL restrictions. This allows remote...
PT-2014-8426 · Red Hat +4 · Libvirt +5
Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: The issue is related to the qemuDomainMigratePerform and qemuDomainMigrateFinish2 functions in qemu/qemu driver.c. These functions do not unlock the domain when an ACL check fails, allowing...
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
Dec. 18, 2014 Alexey Shabalin 1.2.11-alt1 - 1.2.11 - fixed CVE-2014-7823,CVE-2014-8135,CVE-2014-8136,CVE-2014-8131...
DEBIAN-CVE-2013-4399
The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...
CVE-2013-4399
The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...
Design/Logic Flaw
The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...
CVE-2013-4399
The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service use-after-free and crash by registering an event handler and then closing t...