PT-2013-3493 · Libvirt+2 · Libvirt+2

Edoardo Comar · Publicado 2013-05-16 · Atualizado 2024-06-15 · CVE-2013-1962

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libvirt version 1.0.5

Description The issue allows remote attackers to cause a denial of service by consuming file descriptors via a large number of requests to list all volumes for a particular pool. This is related to the remoteDispatchStoragePoolListAllVolumes function in the storage pool manager.

Recommendations For libvirt version 1.0.5, consider restricting access to the remoteDispatchStoragePoolListAllVolumes function until a patch is available. As a temporary workaround, limit the number of requests to list all volumes for a particular pool to prevent file descriptor consumption.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CESA-2013_0831

CVE-2013-1962

MGASA-2013-0166

OPENSUSE-SU-2024:10209-1

RHSA-2013:0831

RHSA-2013_0831

Produtos afetados

Centos

Red Hat

Libvirt

Referências · 61

• https://suse.com/security/cve/CVE-2014-3633 · Nota
• https://suse.com/security/cve/CVE-2013-6436 · Nota
• https://suse.com/security/cve/CVE-2011-2511 · Nota
• https://suse.com/security/cve/CVE-2013-1962 · Nota
• https://suse.com/security/cve/CVE-2013-4311 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=10345 · Nota
• https://suse.com/security/cve/CVE-2014-1447 · Nota
• https://suse.com/security/cve/CVE-2014-0179 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1962 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-6458 · Nota
• https://suse.com/security/cve/CVE-2013-4296 · Nota
• https://suse.com/security/cve/CVE-2011-1146 · Nota
• https://suse.com/security/cve/CVE-2014-0028 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2010-2242 · Nota