Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 30, 2017 | Jan 24, 2014 |
| Centos_linux | — | Upgrade libvirt-pythonUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-develUpgrade libvirt-lock-sanlock | Dec 1, 2016 | Jan 24, 2014 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Jan 24, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Jan 24, 2014 |
| Oracle_linux | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-clientUpgrade libvirt-pythonUpgrade libvirt-develUpgrade libvirt | Oct 16, 2024 | Jan 24, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 31, 2013 |
| Suse | — | Upgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-secretUpgrade libvirt-adminUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-hooksUpgrade libvirt-daemonUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedev | Dec 18, 2015 | Jan 24, 2014 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | Jan 24, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub