The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Dec 19, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Dec 19, 2014 |
| Suse | — | Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-umlUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-umlUpgrade libvirt-daemon-driver-secretUpgrade libvirt-devel-32bitUpgrade libvirt-daemonUpgrade libvirt-client-32bitUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-lxcUpgrade libvirt-develUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-debugsourceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-login-shell-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-login-shellUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-xen-debuginfoUpgrade libvirt-daemon-driver-uml-debuginfoUpgrade libvirt-daemon-driver-lxc-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-qemuUpgrade libvirt-docUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-xenUpgrade libvirt-client-debuginfo-32bitUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-vbox-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-vboxUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-debuginfoUpgrade libvirt-daemon-driver-libxl-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-secret-debuginfo | Dec 18, 2015 | Dec 19, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub