PT-2012-4718 · Libvirt+2 · Libvirt+2

Petr Matousek · Published 2012-08-07 · Updated 2024-06-15 · CVE-2012-3445

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libvirt version 0.9.13

Description The issue is related to the virTypedParameterArrayClear function in libvirt, which does not properly handle virDomain* API calls with typed parameters. This might allow remote authenticated users to cause a denial of service, resulting in a libvirtd crash. The crash can be triggered via an RPC command with nparams set to zero, leading to an out-of-bounds read or a free of an invalid pointer.

Recommendations For libvirt version 0.9.13, consider disabling the virTypedParameterArrayClear function as a temporary workaround until a patch is available. Restrict access to the virDomain* API calls to minimize the risk of exploitation. Avoid using RPC commands with nparams set to zero in the affected API endpoint until the issue is resolved.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CESA-2012_1202

CVE-2012-3445

OPENSUSE-SU-2024:10209-1

RHSA-2012:1202

RHSA-2012_1202

Affected Products

Centos

Red Hat

Libvirt

References · 56

• https://osv.dev/vulnerability/CVE-2012-3445 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3445 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-1202.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3445 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3445 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3445 · Security Note
• http://secunia.com/advisories/50118 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-08/msg00023.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-1202.html · Vendor Advisory
• https://lists.centos.org/pipermail/centos-announce/2012-August/055742.html · Note
• https://suse.com/security/cve/CVE-2013-6456 · Note
• https://suse.com/security/cve/CVE-2013-4153 · Note
• https://suse.com/security/cve/CVE-2014-3657 · Note
• https://suse.com/security/cve/CVE-2011-2511 · Note