libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-devel | Dec 1, 2016 | May 31, 2011 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | May 31, 2011 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | May 31, 2011 |
| Oracle_linux | — | Upgrade libvirt-pythonUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-devel | Oct 16, 2024 | May 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 23, 2011 |
| Suse | — | Upgrade libvirt-devel-32bitUpgrade libvirt-develUpgrade libvirt-docUpgrade libvirt-client-32bitUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-clientUpgrade libvirt-lock-sanlock | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-bin | Nov 8, 2024 | May 31, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub