Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service (libvirtd crash) and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-devel | Dec 1, 2016 | Aug 10, 2011 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Aug 10, 2011 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Aug 10, 2011 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirtUpgrade libvirt-pythonUpgrade libvirt-client | Oct 16, 2024 | Aug 10, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 24, 2011 |
| Suse | — | Upgrade libvirt-pythonUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-docUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-networkUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-hooksUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-storage-disk | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libvirt-bin | Nov 8, 2024 | Aug 10, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub