5.2

CVE-2013-6457

The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Libvirt Version <= 1.2.0
Redhat ≫ Libvirt Version0.0.1
Redhat ≫ Libvirt Version0.0.2
Redhat ≫ Libvirt Version0.0.3
Redhat ≫ Libvirt Version0.0.4
Redhat ≫ Libvirt Version0.0.5
Redhat ≫ Libvirt Version0.0.6
Redhat ≫ Libvirt Version0.1.0
Redhat ≫ Libvirt Version0.1.1
Redhat ≫ Libvirt Version0.1.3
Redhat ≫ Libvirt Version0.1.4
Redhat ≫ Libvirt Version0.1.5
Redhat ≫ Libvirt Version0.1.6
Redhat ≫ Libvirt Version0.1.7
Redhat ≫ Libvirt Version0.1.8
Redhat ≫ Libvirt Version0.1.9
Redhat ≫ Libvirt Version0.2.0
Redhat ≫ Libvirt Version0.2.1
Redhat ≫ Libvirt Version0.2.2
Redhat ≫ Libvirt Version0.2.3
Redhat ≫ Libvirt Version0.3.0
Redhat ≫ Libvirt Version0.3.1
Redhat ≫ Libvirt Version0.3.2
Redhat ≫ Libvirt Version0.3.3
Redhat ≫ Libvirt Version0.4.0
Redhat ≫ Libvirt Version0.4.1
Redhat ≫ Libvirt Version0.4.2
Redhat ≫ Libvirt Version0.4.3
Redhat ≫ Libvirt Version0.4.4
Redhat ≫ Libvirt Version0.4.5
Redhat ≫ Libvirt Version0.4.6
Redhat ≫ Libvirt Version0.5.0
Redhat ≫ Libvirt Version0.5.1
Redhat ≫ Libvirt Version0.6.0
Redhat ≫ Libvirt Version0.6.1
Redhat ≫ Libvirt Version0.6.2
Redhat ≫ Libvirt Version0.6.3
Redhat ≫ Libvirt Version0.6.4
Redhat ≫ Libvirt Version0.6.5
Redhat ≫ Libvirt Version0.7.0
Redhat ≫ Libvirt Version0.7.1
Redhat ≫ Libvirt Version0.7.2
Redhat ≫ Libvirt Version0.7.3
Redhat ≫ Libvirt Version0.7.4
Redhat ≫ Libvirt Version0.7.5
Redhat ≫ Libvirt Version0.7.6
Redhat ≫ Libvirt Version0.7.7
Redhat ≫ Libvirt Version0.8.0
Redhat ≫ Libvirt Version0.8.1
Redhat ≫ Libvirt Version0.8.2
Redhat ≫ Libvirt Version0.8.3
Redhat ≫ Libvirt Version0.8.4
Redhat ≫ Libvirt Version0.8.5
Redhat ≫ Libvirt Version0.8.6
Redhat ≫ Libvirt Version0.8.7
Redhat ≫ Libvirt Version0.8.8
Redhat ≫ Libvirt Version0.9.0
Redhat ≫ Libvirt Version0.9.1
Redhat ≫ Libvirt Version0.9.2
Redhat ≫ Libvirt Version0.9.3
Redhat ≫ Libvirt Version0.9.4
Redhat ≫ Libvirt Version0.9.5
Redhat ≫ Libvirt Version0.9.6
Redhat ≫ Libvirt Version0.9.6.1
Redhat ≫ Libvirt Version0.9.6.2
Redhat ≫ Libvirt Version0.9.6.3
Redhat ≫ Libvirt Version0.9.7
Redhat ≫ Libvirt Version0.9.8
Redhat ≫ Libvirt Version0.9.9
Redhat ≫ Libvirt Version0.9.10
Redhat ≫ Libvirt Version0.9.11
Redhat ≫ Libvirt Version0.9.11.1
Redhat ≫ Libvirt Version0.9.11.2
Redhat ≫ Libvirt Version0.9.11.3
Redhat ≫ Libvirt Version0.9.11.4
Redhat ≫ Libvirt Version0.9.11.5
Redhat ≫ Libvirt Version0.9.11.6
Redhat ≫ Libvirt Version0.9.11.7
Redhat ≫ Libvirt Version0.9.11.8
Redhat ≫ Libvirt Version0.9.12
Redhat ≫ Libvirt Version0.9.13
Redhat ≫ Libvirt Version0.10.0
Redhat ≫ Libvirt Version0.10.1
Redhat ≫ Libvirt Version0.10.2
Redhat ≫ Libvirt Version0.10.2.1
Redhat ≫ Libvirt Version0.10.2.2
Redhat ≫ Libvirt Version0.10.2.3
Redhat ≫ Libvirt Version0.10.2.4
Redhat ≫ Libvirt Version0.10.2.5
Redhat ≫ Libvirt Version0.10.2.6
Redhat ≫ Libvirt Version0.10.2.7
Redhat ≫ Libvirt Version0.10.2.8
Redhat ≫ Libvirt Version1.0.0
Redhat ≫ Libvirt Version1.0.1
Redhat ≫ Libvirt Version1.0.2
Redhat ≫ Libvirt Version1.0.3
Redhat ≫ Libvirt Version1.0.4
Redhat ≫ Libvirt Version1.0.5
Redhat ≫ Libvirt Version1.0.5.1
Redhat ≫ Libvirt Version1.0.5.2
Redhat ≫ Libvirt Version1.0.5.3
Redhat ≫ Libvirt Version1.0.5.4
Redhat ≫ Libvirt Version1.0.5.5
Redhat ≫ Libvirt Version1.0.5.6
Redhat ≫ Libvirt Version1.0.6
Redhat ≫ Libvirt Version1.1.0
Redhat ≫ Libvirt Version1.1.1
Redhat ≫ Libvirt Version1.1.2
Redhat ≫ Libvirt Version1.1.3
Redhat ≫ Libvirt Version1.1.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.466
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.2 5.1 6.4
AV:A/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://libvirt.org/news.html
http://secunia.com/advisories/60895
http://security.gentoo.org/glsa/glsa-201412-04.xml
http://www.ubuntu.com/usn/USN-2093-1
http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html
https://bugzilla.redhat.com/show_bug.cgi?id=1048629
Vendor Advisory
https://www.redhat.com/archives/libvir-list/2013-December/msg01176.html
https://www.redhat.com/archives/libvir-list/2013-December/msg01258.html