Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-6457HistoryJan 24, 2014 - 6:55 p.m.
CVE-2013-6457
2014-01-2418:55:04
Debian Security Bug Tracker
security-tracker.debian.org
22
CVSS2
5.2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:P/I:P/A:P
EPSS
0
Percentile
5.1%
The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libvirt | < 1.2.1-1 | libvirt_1.2.1-1_all.deb |
| Debian | 11 | all | libvirt | < 1.2.1-1 | libvirt_1.2.1-1_all.deb |
| Debian | 999 | all | libvirt | < 1.2.1-1 | libvirt_1.2.1-1_all.deb |
| Debian | 13 | all | libvirt | < 1.2.1-1 | libvirt_1.2.1-1_all.deb |
Related
cvelist
cvelist
CVE-2013-6457
2014-01-24 18:00:00
prion
prion
Command injection
2014-01-24 18:55:00
ubuntucve
ubuntucve
CVE-2013-6457
2014-01-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-08-14 10:17:03
cve
cve
CVE-2013-6457
2014-01-24 18:55:04
nvd
nvd
CVE-2013-6457
2014-01-24 18:55:04
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2014:0268-1)
2014-06-13 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.10 : libvirt vulnerabilities (USN-2093-1)
2014-01-31 00:00:00
GLSA-201412-04 : libvirt: Multiple vulnerabilities
2014-12-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2093-1)
2014-02-03 00:00:00
Ubuntu Update for libvirt USN-2093-1
2014-02-03 00:00:00
Gentoo Security Advisory GLSA 201412-04
2015-09-29 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2014-01-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.2-alt1
2014-03-05 00:00:00
f5
f5
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
gentoo
gentoo
libvirt: Multiple vulnerabilities
2014-12-08 00:00:00
osv
osv
libvirt-2.5.0-1.1 on GA media
2024-06-15 00:00:00
CVE-2019-3840
2019-03-27 13:29:01
CVE-2021-3975
2022-08-23 20:15:08
CVSS2
5.2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:L/Au:S/C:P/I:P/A:P
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2013-6457