CVE-2013-4292
libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remote.c and (2) remote/remote_driver.c.
- Score
- CVSS 2.0 2.1 Low
- Status
- Modified - secalert@redhat.com
- Published
- 2013-09-30
- Last modified
- 2024-08-06
- Weaknesses
- CWE-399
Affected products
References
- http://libvirt.org/news.html
- http://secunia.com/advisories/60895
- http://security.gentoo.org/glsa/glsa-201412-04.xml
- http://www.mail-archive.com/libvir-list%40redhat.com/msg83332.html