The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Sep 30, 2013 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-lxcUpgrade libvirt-daemonUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-adminUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-xenUpgrade libvirt-client-32bitUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-libxl | Aug 9, 2024 | Sep 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub