The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvirt | Aug 30, 2017 | May 28, 2013 |
| Centos_linux | — | Upgrade libvirt-pythonUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-lock-sanlockUpgrade libvirt-devel | Dec 1, 2016 | May 28, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | May 28, 2013 |
| Oracle_linux | — | Upgrade libvirt-develUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-python | Oct 16, 2024 | May 29, 2013 |
| Suse | — | Upgrade libvirt-clientUpgrade libvirt-devel-32bitUpgrade libvirt-develUpgrade libvirt-pythonUpgrade libvirt-client-32bitUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-doc | Dec 12, 2013 | May 28, 2013 |
| Ubuntu | — | Upgrade libvirt0 | Nov 8, 2024 | May 29, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub