PT-2014-3127 · Libvirt+4 · Libvirt+4

Alexandre M · Published 2014-01-24 · Updated 2024-06-15 · CVE-2013-6458

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:A/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libvirt versions prior to 1.2.1

Description The issue is related to multiple race conditions in certain functions within libvirt. These functions are virDomainBlockStats, virDomainGetBlockInf, qemuDomainBlockJobImpl, and virDomainGetBlockIoTune. The problem arises because these functions do not properly verify that the disk is attached. This oversight allows remote read-only attackers to cause a denial of service, specifically a crash of the libvirtd service, by utilizing the virDomainDetachDeviceFlags command.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the virDomainDetachDeviceFlags command to minimize the risk of exploitation. Additionally, ensure that all disk attachments are properly verified before performing any operations that could trigger the race conditions in the affected functions.

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2014-1262

CESA-2014_0103

CVE-2013-6458

DSA-2846-1

MGASA-2014-0051

OPENSUSE-SU-2024:10209-1

RHSA-2014:0103

RHSA-2014_0103

SUSE-SU-2014_0318-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Libvirt

References · 76

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6436 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1447 · Security Note
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html · Vendor Advisory
• http://ubuntu.com/usn/USN-2093-1 · Vendor Advisory
• http://debian.org/security/2014/dsa-2846 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1262 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1043069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456 · Security Note
• https://linux.oracle.com/errata/ELSA-2014-0103.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0051.html · Security Note
• http://secunia.com/advisories/56186 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0103.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-6458 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10209-1 · Vendor Advisory