PT-2014-3113 · Red Hat+2 · Libvirt+2

Martin Kletzander · Published 2014-01-07 · Updated 2024-06-15 · CVE-2013-6436

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions libvirt versions 1.0.5 through 1.2.0

Description The issue is related to the lxcDomainGetMemoryParameters method in lxc/lxc driver.c, which does not properly check the status of LXC guests when reading memory tunables. This allows local users to cause a denial of service, resulting in a NULL pointer dereference and libvirtd crash, via a guest in the shutdown status. The "virsh memtune" command can be used to demonstrate this issue.

Recommendations For libvirt versions 1.0.5 through 1.2.0, consider restricting access to the lxcDomainGetMemoryParameters method until a patch is available. As a temporary workaround, avoid using the "virsh memtune" command on guests in the shutdown status to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-1262

CVE-2013-6436

OPENSUSE-SU-2024:10209-1

SUSE-SU-2014_0162-1

Affected Products

Alt Linux

Suse

Libvirt

References · 60

• https://osv.dev/vulnerability/CVE-2013-6436 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6436 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-6436 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1447 · Security Note
• http://ubuntu.com/usn/USN-2093-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1262 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0028 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-6436 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6436 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00004.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6457 · Security Note
• http://security.gentoo.org/glsa/glsa-201412-04.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6458 · Security Note