Denial Of Service (DoS)

2018-08-1404:05:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

JSON

libvirt.so is vulnerable to denial of service (DoS) attacks. The library contains a race condition when handling the keepalive initialization requests, allowing a malicious user to cause the library to crash by closing the connection before the keepalive request is sent.

CPENameOperatorVersion
libvirt.soeq0.10.2
libvirteq0.8.1__27.el6_0.5
libvirteq0.8.7__18.el6_1.1
libvirteq0.10.2__18.el6_4.5
libvirteq0.8.1__27.el6_0.6
libvirteq0.10.2__18.el6_4.9
libvirteq0.10.2__18.el6_4.14
libvirteq0.9.10__21.el6_3.7
libvirteq0.8.7__18.el6_1.4
libvirteq0.9.4__23.el6_2.9

Name	Operator	Version
libvirt.so	eq	0.10.2
libvirt	eq	0.8.1__27.el6_0.5
libvirt	eq	0.8.7__18.el6_1.1
libvirt	eq	0.10.2__18.el6_4.5
libvirt	eq	0.8.1__27.el6_0.6
libvirt	eq	0.10.2__18.el6_4.9
libvirt	eq	0.10.2__18.el6_4.14
libvirt	eq	0.9.10__21.el6_3.7
libvirt	eq	0.8.7__18.el6_1.4
libvirt	eq	0.9.4__23.el6_2.9