PT-2014-3126 · Libvirt+1 · Libvirt+1

Murray Mcallister · Publicado 2014-01-24 · Atualizado 2024-06-15 · CVE-2013-6457

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1

Description The issue is related to the libxlDomainGetNumaParameters function in the libxl driver, which does not properly initialize the nodemap. This can be exploited by local users to cause a denial of service, resulting in an invalid free operation and crash, or potentially execute arbitrary code. The exploitation is possible via an inactive domain to the virsh numatune command.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2014-1262

CVE-2013-6457

OPENSUSE-SU-2024:10209-1

Produtos afetados

Alt Linux

Libvirt

Referências · 53

• https://suse.com/security/cve/CVE-2013-6456 · Nota
• https://suse.com/security/cve/CVE-2013-4153 · Nota
• https://suse.com/security/cve/CVE-2014-3657 · Nota
• https://suse.com/security/cve/CVE-2011-2511 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6436 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1447 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-1447 · Nota
• http://ubuntu.com/usn/USN-2093-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-6458 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-6457 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-6457 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-5247 · Nota
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4154 · Nota
• https://errata.altlinux.org/ALT-PU-2014-1262 · Aviso do Fabricante