Lucene search
RedhatCVELIST:CVE-2014-3657HistoryOct 06, 2014 - 2:00 p.m.
CVE-2014-3657
2014-10-0614:00:00
redhat
www.cve.org
6
The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.
References
libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=fc22b2e74890873848b43fffae43025d22053669
lists.opensuse.org/opensuse-updates/2014-10/msg00014.html
lists.opensuse.org/opensuse-updates/2014-10/msg00017.html
rhn.redhat.com/errata/RHSA-2014-1352.html
secunia.com/advisories/60291
secunia.com/advisories/62303
security.libvirt.org/2014/0005.html
www.ubuntu.com/usn/USN-2404-1
Related
debiancve
debiancve
CVE-2014-3657
2014-10-06 14:55:10
prion
prion
Command injection
2014-10-06 14:55:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:58:48
ubuntucve
ubuntucve
CVE-2014-3657
2014-10-06 00:00:00
nvd
nvd
CVE-2014-3657
2014-10-06 14:55:10
cve
cve
CVE-2014-3657
2014-10-06 14:55:10
openvas
openvas
RedHat Update for libvirt RHSA-2014:1352-01
2014-10-02 00:00:00
Ubuntu: Security Advisory (USN-2404-1)
2014-11-12 00:00:00
Oracle: Security Advisory (ELSA-2014-1352)
2015-10-06 00:00:00
redhat
redhat
(RHSA-2014:1352) Moderate: libvirt security and bug fix update
2014-10-01 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
centos
centos
libvirt security update
2014-10-03 18:13:17
libvirt security update
2014-11-18 18:46:17
nessus
nessus
Mandriva Linux Security Advisory : libvirt (MDVSA-2014:195)
2014-10-06 00:00:00
Ubuntu 14.04 LTS : libvirt vulnerabilities (USN-2404-1)
2014-11-12 00:00:00
openSUSE Security Update : libvirt (openSUSE-SU-2014:1290-1)
2014-10-15 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:195 ] libvirt
2014-10-05 00:00:00
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
libvirt information leakage
2014-11-24 00:00:00
oraclelinux
oraclelinux
libvirt security and bug fix update
2014-10-01 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.9-alt1
2014-10-03 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerbilities
2014-10-07 13:22:51
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
osv
osv