Denial Of Service (DoS)

2019-01-1508:59:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

JSON

libvirt.so is vulnerable to denial of service (DoS). The vulnerability is possible because the remoteDispatchDomainMemoryStats function in daemon/remote.c does not assign an uninitialized pointer to the NULL causing pointer dereferencing and allowing an authenticated users to trigger the attack.

CPENameOperatorVersion
libvirteq0.9.4__23.el6_2.6
libvirteq0.9.10__21.el6_3.8
libvirteq0.9.10__21.el6_3.3
libvirteq0.8.7__18.el6_1.4
libvirteq0.8.1__27.el6_0.6
libvirteq0.9.4__23.el6_2.1
libvirteq0.8.1__27.el6_0.5
libvirteq0.9.10__21.el6_3.4
libvirteq0.9.4__23.el6_2.7
libvirteq0.9.10__21.el6_3.1

Name	Operator	Version
libvirt	eq	0.9.4__23.el6_2.6
libvirt	eq	0.9.10__21.el6_3.8
libvirt	eq	0.9.10__21.el6_3.3
libvirt	eq	0.8.7__18.el6_1.4
libvirt	eq	0.8.1__27.el6_0.6
libvirt	eq	0.9.4__23.el6_2.1
libvirt	eq	0.8.1__27.el6_0.5
libvirt	eq	0.9.10__21.el6_3.4
libvirt	eq	0.9.4__23.el6_2.7
libvirt	eq	0.9.10__21.el6_3.1