CVE-2013-4154

Severity

43%

Complexity

86%

Confidentiality

48%

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command.

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

CVSS 2.0 Base Score 4.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:N/A:P).

Overview

First reported 11 years ago

2013-09-30 21:55:00

Last updated 11 years ago

2013-10-11 15:18:00

Affected Software

Red Hat libvirt 1.0.0

1.0.0

Red Hat libvirt 1.0.1

1.0.1

Red Hat libvirt 1.0.2

1.0.2

Red Hat libvirt 1.0.3

1.0.3

Red Hat libvirt 1.0.4

1.0.4

Red Hat libvirt 1.0.5

1.0.5

Red Hat libvirt 1.0.6

1.0.6

Red Hat libvirt

References

http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=96518d4316b711c72205117f8d5c967d5127bbb6

Exploit, Patch

http://libvirt.org/news.html

[oss-security] 20130719 Re: CVE request -- libvirt: crash of libvirtd without guest agent configuration

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=984821

Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=986386