NetSight
IP …
medium5.0

CVE-2014-3657

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attacke…

Impact

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

Affected products

VendorProductAffected versions
LibvirtLibvirt
through 1.2.8
Versions 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4

Weakness classification

CWE-399

References