The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirt-login-shellUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-lock-sanlockUpgrade libvirt-pythonUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-secret | Dec 1, 2016 | Oct 6, 2014 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Oct 6, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Oct 6, 2014 |
| Oracle_linux | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemonUpgrade libvirt-docsUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxc | Oct 16, 2024 | Oct 6, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-lxcUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-nssUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-client-32bitUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docUpgrade kvmUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-pythonUpgrade libvirt-daemon | Dec 18, 2015 | Oct 6, 2014 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Nov 8, 2024 | Oct 6, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub