NetSight
medium4.0

CVE-2013-4296

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x be…

Impact

The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and crash) via a crafted RPC call.

Affected products

VendorProductAffected versions
RedhatLibvirt
Versions 0.9.1, 0.9.2, 0.9.3, 0.9.4, 0.9.5, 0.9.6
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
RedhatEnterprise Linux
Version 6.0

Weakness classification

References