CVE-2017-2635

A NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty drives. A remote authenticated attacker could use this flaw to crash libvirtd daemon resulting in denial of service.

Score

CVSS 3.0 7.7 High

Status

Modified - secalert@redhat.com

Published

2018-08-22

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Libvirt (Redhat)
• Libvirt (The Libvirt Project)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2635
• https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=c3de387380f6057ee0e46cd9f2f0a092e8070875