Denial Of Service (DoS)

2019-01-1508:51:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

JSON

libvirt is vulnerable to denial of service. When parsing XML documents using the libxml2 library, libvirt passes the XML_PARSE_NOENT flag and all XML entities in the parsed documents are expanded. This allows an attacker to parse an XML document which references a special file that blocks read access and causes the process to hang.

CPENameOperatorVersion
libvirteq0.10.2__18.el6_4.14
libvirteq0.9.4__23.el6_2.6
libvirteq0.9.10__21.el6_3.8
libvirteq0.9.10__21.el6_3.3
libvirteq0.8.7__18.el6_1.4
libvirteq0.8.1__27.el6_0.6
libvirteq0.10.2__18.el6
libvirteq0.9.4__23.el6_2.1
libvirteq0.8.1__27.el6_0.5
libvirteq0.9.10__21.el6_3.4

Name	Operator	Version
libvirt	eq	0.10.2__18.el6_4.14
libvirt	eq	0.9.4__23.el6_2.6
libvirt	eq	0.9.10__21.el6_3.8
libvirt	eq	0.9.10__21.el6_3.3
libvirt	eq	0.8.7__18.el6_1.4
libvirt	eq	0.8.1__27.el6_0.6
libvirt	eq	0.10.2__18.el6
libvirt	eq	0.9.4__23.el6_2.1
libvirt	eq	0.8.1__27.el6_0.5
libvirt	eq	0.9.10__21.el6_3.4