Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libvirt-lock-sanlockUpgrade libvirt-pythonUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-devel | Dec 1, 2016 | Feb 8, 2013 |
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Feb 8, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Feb 8, 2013 |
| Oracle_linux | — | Upgrade libvirtUpgrade libvirt-lock-sanlockUpgrade libvirt-pythonUpgrade libvirt-clientUpgrade libvirt-devel | Oct 16, 2024 | Feb 8, 2013 |
| Suse | — | Upgrade libvirt-client-x86Upgrade libvirt-develUpgrade libvirt-devel-32bitUpgrade libvirt-client-debuginfo-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-client-debuginfoUpgrade libvirt-python-debuginfoUpgrade libvirt-client-debuginfo-x86Upgrade libvirt-client-32bitUpgrade sle-sdk-releaseUpgrade libvirt-docUpgrade libvirt-debugsourceUpgrade libvirt-pythonUpgrade libvirt-debuginfoUpgrade libvirtUpgrade libvirt-client | Feb 17, 2015 | Feb 8, 2013 |
| Ubuntu | — | Upgrade libvirt-binUpgrade libvirt0 | Nov 8, 2024 | Feb 8, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub