PT-2014-3126 · Libvirt+1 · Libvirt+1

Murray Mcallister · Published 2014-01-24 · Updated 2024-06-15 · CVE-2013-6457

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1

Description The issue is related to the libxlDomainGetNumaParameters function in the libxl driver, which does not properly initialize the nodemap. This can be exploited by local users to cause a denial of service, resulting in an invalid free operation and crash, or potentially execute arbitrary code. The exploitation is possible via an inactive domain to the virsh numatune command.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2014-1262

CVE-2013-6457

OPENSUSE-SU-2024:10209-1

Affected Products

Alt Linux

Libvirt

References · 53

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6436 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1447 · Security Note
• http://ubuntu.com/usn/USN-2093-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-6457 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-6457 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1262 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1048629 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0028 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6457 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-6457 · Security Note
• http://security.gentoo.org/glsa/glsa-201412-04.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-6457 · Vendor Advisory