Published: 07/08/2012 Updated: 22/03/2013

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P

The virTypedParameterArrayClear function in libvirt 0.9.13 does not properly handle virDomain* API calls with typed parameters, which might allow remote authenticated users to cause a denial of service (libvirtd crash) via an RPC command with nparams set to zero, which triggers an out-of-bounds read or a free of an invalid pointer.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat libvirt 0.9.13

Synopsis Moderate: libvirt security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated libvirt packages that fix one security issue and two bugs are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact ...

Debian Bug report logs - #734556 libvirt: CVE-2013-6458: qemu: job usage issue in several APIs leading to libvirtd crash Package: libvirt; Maintainer for libvirt is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 8 Jan 2014 ...

Debian Bug report logs - #683483 CVE-2012-3445 Package: libvirt; Maintainer for libvirt is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Wed, 1 Aug 2012 07:51:02 UTC Severity: grave Tags: security Fixed in versions lib ...

CWE-399 https://bugzilla.redhat.com/show_bug.cgi?id=844734 http://www.openwall.com/lists/oss-security/2012/07/31/4 http://secunia.com/advisories/50118 http://www.openwall.com/lists/oss-security/2012/07/31/7 http://www.securityfocus.com/bid/54748 https://www.redhat.com/archives/libvir-list/2012-July/msg01650.html http://lists.opensuse.org/opensuse-updates/2012-08/msg00023.html http://rhn.redhat.com/errata/RHSA-2012-1202.html http://secunia.com/advisories/50372 http://secunia.com/advisories/50299 https://access.redhat.com/errata/RHSA-2012:1202 https://nvd.nist.gov

CVE-2012-3445

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect