Lucene search
Ubuntu.comUB:CVE-2013-4399HistoryDec 12, 2014 - 12:00 a.m.
CVE-2013-4399
2014-12-1200:00:00
ubuntu.com
ubuntu.com
10
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.011
Percentile
84.3%
The remoteClientFreeFunc function in daemon/remote.c in libvirt before
1.1.3, when ACLs are used, does not set an identity, which causes event
handler removal to be denied and remote attackers to cause a denial of
service (use-after-free and crash) by registering an event handler and then
closing the connection.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | per upstream, introduced in 1.1.0 |
| mdeslaur | in fix-crash-in-libvirtd-when-events patch in saucy+ |
Related
veracode
veracode
Denial Of Service (DoS)
2018-08-15 03:47:57
nvd
nvd
CVE-2013-4399
2014-12-12 15:59:00
cve
cve
CVE-2013-4399
2014-12-12 15:59:00
debiancve
debiancve
CVE-2013-4399
2014-12-12 15:59:00
cvelist
cvelist
CVE-2013-4399
2014-12-12 15:00:00
prion
prion
Design/Logic Flaw
2014-12-12 15:59:00
f5
f5
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
nessus
nessus
GLSA-201412-04 : libvirt: Multiple vulnerabilities
2014-12-09 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2014-12-08 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201412-04
2015-09-29 00:00:00
osv
osv
libvirt-2.5.0-1.1 on GA media
2024-06-15 00:00:00
CVE-2021-3667
2022-03-02 23:15:08
CVE-2021-3559
2021-05-24 12:15:07
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.011
Percentile
84.3%
Related for UB:CVE-2013-4399