An issue exists in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x prior to 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is responsible for retrieving domain statistics when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the domstats command, resulting in a potential denial of service.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
redhat libvirt |
||
redhat enterprise linux 8.0 |
Vulmon