The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirt-develUpgrade libvirt-clientUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-lock-sanlock | Dec 1, 2016 | Aug 7, 2012 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 7, 2012 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-clientUpgrade libvirt-pythonUpgrade libvirt-lock-sanlockUpgrade libvirt | Oct 16, 2024 | Aug 7, 2012 |
| Suse | — | Upgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-proxyUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docUpgrade libvirt-client-qemuUpgrade libvirt-ssh-proxyUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-develUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-32bitUpgrade libvirt-daemon-xenUpgrade libvirt-devel-32bitUpgrade libvirt-daemonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-admin | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub