The virFileNBDDeviceAssociate function in util/virfile.c in libvirt 1.1.2 and earlier allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Sep 30, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Sep 30, 2013 |
| Suse | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libsUpgrade libvirt-develUpgrade libvirtUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docUpgrade libvirt-daemon-config-networkUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-xenUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-hooks | Aug 9, 2024 | Sep 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub