Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Sep 30, 2013 |
| Suse | — | Upgrade libvirtUpgrade libvirt-adminUpgrade libvirt-daemon-xenUpgrade libvirt-client-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-docUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-iscsi | Aug 9, 2024 | Sep 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub