The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libvirt | Jul 30, 2024 | Dec 19, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Oct 30, 2017 | Dec 19, 2014 |
| Suse | — | Upgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-uml-debuginfoUpgrade libvirt-daemon-driver-lxc-debuginfoUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-xen-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-32bitUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemonUpgrade libvirt-login-shellUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-umlUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-umlUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-login-shell-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-libxl-debuginfoUpgrade libvirt-daemon-driver-storage-debuginfoUpgrade libvirt-lock-sanlockUpgrade libvirt-docUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-vbox-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-vboxUpgrade libvirtUpgrade libvirt-daemon-driver-vboxUpgrade libvirt-daemon-driver-xenUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-client-debuginfo-32bit | Dec 18, 2015 | Dec 19, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub