Lucene search

RedhatCVE-2013-4153

HistorySep 30, 2013 - 9:55 p.m.

CVE-2013-4153

2013-09-3021:55:09

CWE-399

redhat

web.nvd.nist.gov

cve-2013-4153

vulnerability

qemuagentgetvcpus

libvirt

remote attack

denial of service

cpu count

daemon crash

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.012

Percentile

85.1%

JSON

Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) via a cpu count request, as demonstrated by the “virsh vcpucount dom --guest” command.

Affected configurations

Nvd

Node

redhatlibvirtMatch1.0.6

redhatlibvirtMatch1.1.0

VendorProductVersionCPE
redhatlibvirt1.0.6cpe:2.3:a:redhat:libvirt:1.0.6:*:*:*:*:*:*:*
redhatlibvirt1.1.0cpe:2.3:a:redhat:libvirt:1.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	libvirt	1.0.6	cpe:2.3:a:redhat:libvirt:1.0.6:::::::*
redhat	libvirt	1.1.0	cpe:2.3:a:redhat:libvirt:1.1.0:::::::*

References

libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=dfc692350a04a70b4ca65667c30869b3bfdaf034

libvirt.org/news.html

openwall.com/lists/oss-security/2013/07/19/11

bugzilla.redhat.com/show_bug.cgi?id=984821

bugzilla.redhat.com/show_bug.cgi?id=986383

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.012

Percentile

85.1%

JSON

Related for CVE-2013-4153