Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
2.1
CVSSv2

CVE-2014-8136

Published: 19/12/2014 Updated: 13/02/2023
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

mageia mageia 4.0

redhat libvirt -

canonical ubuntu linux 12.04

canonical ubuntu linux 15.10

canonical ubuntu linux 14.04

canonical ubuntu linux 15.04

opensuse opensuse 13.1

opensuse opensuse 13.2

redhat enterprise linux desktop 7.0

redhat enterprise linux workstation 7.0

redhat enterprise linux server 7.0

redhat enterprise linux hpc node 7.0

Vendor Advisories

Ubuntu Security Notice: libvirt vulnerabilities
Several security issues were fixed in libvirt ...
Debian CVElist Bug Report Logs: CVE-2014-8131 deadlock or segfault in virConnectGetAllDomainStats
Debian Bug report logs - #773858 CVE-2014-8131 deadlock or segfault in virConnectGetAllDomainStats Package: src:libvirt; Maintainer for src:libvirt is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Reported by: Guido Günther <agx@sigxcpuorg> Date: Wed, 24 Dec 2014 08:39:17 UTC Severit ...
Debian CVElist Bug Report Logs: CVE-2014-8136 deadlock on failed migration
Debian Bug report logs - #773856 CVE-2014-8136 deadlock on failed migration Package: src:libvirt; Maintainer for src:libvirt is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Reported by: Guido Günther <agx@sigxcpuorg> Date: Wed, 24 Dec 2014 08:39:07 UTC Severity: important Tags: fixe ...
Debian CVElist Bug Report Logs: CVE-2014-8135 crash when using virStorageVolUpload
Debian Bug report logs - #773855 CVE-2014-8135 crash when using virStorageVolUpload Package: src:libvirt; Maintainer for src:libvirt is Debian Libvirt Maintainers <pkg-libvirt-maintainers@listsaliothdebianorg>; Reported by: Guido Günther <agx@sigxcpuorg> Date: Wed, 24 Dec 2014 08:39:02 UTC Severity: grave Tags: ...
Red Hat: CVE-2014-8136
It was found that QEMU's qemuDomainMigratePerform() and qemuDomainMigrateFinish2() functions did not correctly perform a domain unlock on a failed ACL check A remote attacker able to establish a connection to libvirtd could use this flaw to lock a domain of a more privileged user, causing a denial of service ...

References

CWE-264http://secunia.com/advisories/61111http://lists.opensuse.org/opensuse-updates/2015-01/msg00005.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0323.htmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:070http://www.mandriva.com/security/advisories?name=MDVSA-2015:023http://advisories.mageia.org/MGASA-2015-0002.htmlhttp://lists.opensuse.org/opensuse-updates/2015-01/msg00003.htmlhttp://www.ubuntu.com/usn/USN-2867-1http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=2bdcd29c713dfedd813c89f56ae98f6f3898313dhttps://usn.ubuntu.com/2867-1/https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2014-8136
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
bypassopen redirectCVE-2024-4358CVE-2024-24199CVE-2024-5550CVE-2024-5305CVE-2024-30373CVE-2024-1800deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook