libvirt vulnerabilities

2013-09-1800:00:00

ubuntu.com

9.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.4%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04

Packages

libvirt - Libvirt virtualization toolkit

Details

It was discovered that libvirt used the pkcheck tool in an unsafe manner. A
local attacker could possibly use this flaw to bypass polkit
authentication. In Ubuntu, libvirt polkit authentication is not enabled by
default. (CVE-2013-4311)

It was discovered that libvirt incorrectly handled certain memory stats
requests. A remote attacker could use this issue to cause libvirt to
crash, resulting in a denial of service. This issue only affected Ubuntu
12.04 LTS, Ubuntu 12.10, and Ubuntu 13.04. (CVE-2013-4296)

It was discovered that libvirt incorrectly handled certain bitmap
operations. A remote attacker could use this issue to cause libvirt to
crash, resulting in a denial of service. This issue only affected Ubuntu
13.04. (CVE-2013-5651)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchlibvirt0< 1.0.2-0ubuntu11.13.04.4UNKNOWN
Ubuntu13.04noarchlibvirt-bin< 1.0.2-0ubuntu11.13.04.4UNKNOWN
Ubuntu13.04noarchlibvirt-dev< 1.0.2-0ubuntu11.13.04.4UNKNOWN
Ubuntu13.04noarchlibvirt0-dbg< 1.0.2-0ubuntu11.13.04.4UNKNOWN
Ubuntu13.04noarchpython-libvirt< 1.0.2-0ubuntu11.13.04.4UNKNOWN
Ubuntu12.10noarchlibvirt0< 0.9.13-0ubuntu12.5UNKNOWN
Ubuntu12.10noarchlibvirt-bin< 0.9.13-0ubuntu12.5UNKNOWN
Ubuntu12.10noarchlibvirt-dev< 0.9.13-0ubuntu12.5UNKNOWN
Ubuntu12.10noarchlibvirt0-dbg< 0.9.13-0ubuntu12.5UNKNOWN
Ubuntu12.10noarchpython-libvirt< 0.9.13-0ubuntu12.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	libvirt0	< 1.0.2-0ubuntu11.13.04.4	UNKNOWN
Ubuntu	13.04	noarch	libvirt-bin	< 1.0.2-0ubuntu11.13.04.4	UNKNOWN
Ubuntu	13.04	noarch	libvirt-dev	< 1.0.2-0ubuntu11.13.04.4	UNKNOWN
Ubuntu	13.04	noarch	libvirt0-dbg	< 1.0.2-0ubuntu11.13.04.4	UNKNOWN
Ubuntu	13.04	noarch	python-libvirt	< 1.0.2-0ubuntu11.13.04.4	UNKNOWN
Ubuntu	12.10	noarch	libvirt0	< 0.9.13-0ubuntu12.5	UNKNOWN
Ubuntu	12.10	noarch	libvirt-bin	< 0.9.13-0ubuntu12.5	UNKNOWN
Ubuntu	12.10	noarch	libvirt-dev	< 0.9.13-0ubuntu12.5	UNKNOWN
Ubuntu	12.10	noarch	libvirt0-dbg	< 0.9.13-0ubuntu12.5	UNKNOWN
Ubuntu	12.10	noarch	python-libvirt	< 0.9.13-0ubuntu12.5	UNKNOWN