Novell Home

CVE-2013-6458

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2013-6458 at MITRE

Description

Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

NVD CVSS v2 Base Score: 6.8 (AV:A/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

Novell Bugzilla entry: 857492

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SLE 11 SP3 DEBUGINFO
  • libvirt-debuginfo >= 1.0.5.9-0.7.1
  • libvirt-debugsource >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Software Development Kit 11 SP3
  • libvirt-devel >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Software Development Kit 11 SP3
  • libvirt-devel >= 1.0.5.9-0.7.1
  • libvirt-devel-32bit >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Desktop 11 SP3
  • libvirt >= 1.0.5.9-0.7.1
  • libvirt-client >= 1.0.5.9-0.7.1
  • libvirt-doc >= 1.0.5.9-0.7.1
  • libvirt-python >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Desktop 11 SP3
  • libvirt >= 1.0.5.9-0.7.1
  • libvirt-client >= 1.0.5.9-0.7.1
  • libvirt-client-32bit >= 1.0.5.9-0.7.1
  • libvirt-doc >= 1.0.5.9-0.7.1
  • libvirt-python >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Server 11 SP3
  • libvirt >= 1.0.5.9-0.7.1
  • libvirt-client >= 1.0.5.9-0.7.1
  • libvirt-doc >= 1.0.5.9-0.7.1
  • libvirt-lock-sanlock >= 1.0.5.9-0.7.1
  • libvirt-python >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886
SUSE Linux Enterprise Server 11 SP3
  • libvirt >= 1.0.5.9-0.7.1
  • libvirt-client >= 1.0.5.9-0.7.1
  • libvirt-client-32bit >= 1.0.5.9-0.7.1
  • libvirt-doc >= 1.0.5.9-0.7.1
  • libvirt-lock-sanlock >= 1.0.5.9-0.7.1
  • libvirt-python >= 1.0.5.9-0.7.1
Builds
SAT Patch Nr: 8886

© 2014 Novell