SUSE CVE-2014-3657

🗓️ 15 Feb 2023 05:28:26Reported by Suse CVEType

CVE-2014-3657: libvirt before 1.2.9 fails to cleanup the domain list lock, enabling DoS via a null second parameter in virConnectListAllDomains.

Reporter	Title	Published	Views	Family All 77
ALT Linux	Security fix for the ALT Linux 8 package libvirt version 1.2.9-alt1	3 Oct 201400:00	–	altlinux
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	2 Jun 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	2 Jun 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	2 Jun 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	2 Jun 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	2 Jun 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
SUSE Linux Enterprise Desktop	11.3	any	kvm	1.4.2-0.21.4	kvm-1.4.2-0.21.4.noarch.rpm
SUSE Linux Enterprise Server	11.3	any	kvm	1.4.2-0.21.4	kvm-1.4.2-0.21.4.noarch.rpm
SUSE Linux Enterprise Server	11.3	any	kvm	1.4.2-0.21.5	kvm-1.4.2-0.21.5.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	11.3	any	kvm	1.4.2-0.21.5	kvm-1.4.2-0.21.5.noarch.rpm
SUSE Linux Enterprise Desktop	11.3	any	libvirt	1.0.5.9-0.19.3	libvirt-1.0.5.9-0.19.3.noarch.rpm
SUSE Linux Enterprise Server	11.3	any	libvirt	1.0.5.9-0.19.3	libvirt-1.0.5.9-0.19.3.noarch.rpm
SUSE Linux Enterprise Server	11.3	any	libvirt	1.0.5.9-0.19.6	libvirt-1.0.5.9-0.19.6.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	11.3	any	libvirt	1.0.5.9-0.19.6	libvirt-1.0.5.9-0.19.6.noarch.rpm
SUSE Linux Enterprise Desktop	12.1	any	libvirt	1.2.18.1-4.22	libvirt-1.2.18.1-4.22.noarch.rpm
SUSE Linux Enterprise Server	12.1	any	libvirt	1.2.18.1-4.22	libvirt-1.2.18.1-4.22.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2014-3657
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/897783
bugzilla	www.bugzilla.suse.com/899484
lists	www.lists.suse.com/pipermail/sle-security-updates/2015-February/001213.html
lists	www.lists.suse.com/pipermail/sle-security-updates/2015-February/001247.html

13 Apr 2026 09:56Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

EPSS0.01284