6.5

CVE-2014-3672

The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Libvirt Version <= 1.2.21
Xen ≫ Xen
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.373
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2 4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/24/5
Mailing List
http://www.securitytracker.com/id/1035945
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-180.html
Vendor Advisory
https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=0d968ad715475a1660779bcdd2c5b38ad63db4cf
https://libvirt.org/news-2015.html
Vendor Advisory
Release Notes