Libvirt Security Vulnerabilities and Issues — Libvirt CVE List

Lucene search

RedhatLibvirt

3 matches found

CVE•added 2014/12/19 3:59 p.m.•76 views

CVE-2014-8136

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

2.1CVSS7.1AI score0.00131EPSS

CVE•added 2014/12/19 3:59 p.m.•59 views

CVE-2014-8135

The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.

2.1CVSS7.6AI score0.00158EPSS

CVE•added 2014/12/12 3:59 p.m.•55 views

CVE-2013-4399

The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cause a denial of service (use-after-free and crash) by registering an event handler and then closing t...

4.3CVSS8AI score0.00677EPSS