The qemuDomainGetBlockIoTune function in qemu/qemu_driver.c in libvirt before 1.2.9, when a disk has been hot-plugged or removed from the live image, allows remote attackers to cause a denial of service (crash) or read sensitive heap information via a crafted blkiotune query, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-login-shellUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-docsUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-devel | Dec 1, 2016 | Oct 6, 2014 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Oct 6, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Oct 6, 2014 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libvirt-pythonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-login-shellUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon | Oct 16, 2024 | Oct 6, 2014 |
| Suse | — | Upgrade libvirt-pythonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-docUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-qemuUpgrade kvmUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-hooksUpgrade libvirt-adminUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpath | Dec 18, 2015 | Oct 6, 2014 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Nov 8, 2024 | Oct 6, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub