The xenDaemonListDefinedDomains function in xen/xend_internal.c in libvirt 1.1.1 allows remote authenticated users to cause a denial of service (memory corruption and crash) via vectors involving the virConnectListDefinedDomains API function.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Sep 30, 2013 |
| Suse | — | Upgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirtUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-qemuUpgrade libvirt-daemonUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-secretUpgrade libvirt-nssUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-lxcUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-storage | Aug 9, 2024 | Sep 30, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub