CVE-2011-1146

libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict
operations in a read-only connection, which allows remote attackers to
cause a denial of service (host OS crash) or possibly execute arbitrary
code via a (1) virNodeDeviceDettach, (2) virNodeDeviceReset, (3)
virDomainRevertToSnapshot, (4) virDomainSnapshotDelete, (5)
virNodeDeviceReAttach, or (6) virConnectDomainXMLToNative call, a different
vulnerability than CVE-2008-5086.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617773&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=683650&gt;

Notes