Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8136HistoryDec 19, 2014 - 3:59 p.m.
CVE-2014-8136
2014-12-1915:59:10
Debian Security Bug Tracker
security-tracker.debian.org
16
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0
Percentile
5.1%
The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libvirt | < 1.2.9-7 | libvirt_1.2.9-7_all.deb |
| Debian | 11 | all | libvirt | < 1.2.9-7 | libvirt_1.2.9-7_all.deb |
| Debian | 999 | all | libvirt | < 1.2.9-7 | libvirt_1.2.9-7_all.deb |
| Debian | 13 | all | libvirt | < 1.2.9-7 | libvirt_1.2.9-7_all.deb |
Related
cve
cve
CVE-2014-8136
2014-12-19 15:59:10
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2015:0006-1)
2015-01-05 00:00:00
Mandriva Linux Security Advisory : libvirt (MDVSA-2015:023)
2015-01-16 00:00:00
Scientific Linux Security Update : libvirt on SL7.x x86_64 (20150305)
2015-03-26 00:00:00
mageia
mageia
Updated libvirt packages fix CVE-2014-8136
2015-01-05 19:30:30
cvelist
cvelist
CVE-2014-8136
2014-12-19 15:00:00
ubuntucve
ubuntucve
CVE-2014-8136
2014-12-19 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0002)
2022-01-28 00:00:00
RedHat Update for libvirt RHSA-2015:0323-01
2015-03-06 00:00:00
Oracle: Security Advisory (ELSA-2015-0323)
2015-10-06 00:00:00
nvd
nvd
CVE-2014-8136
2014-12-19 15:59:10
securityvulns
securityvulns
libvirt / qemu DoS
2015-01-18 00:00:00
[ MDVSA-2015:023 ] libvirt
2015-01-18 00:00:00
prion
prion
Design/Logic Flaw
2014-12-19 15:59:00
centos
centos
libvirt security update
2015-03-17 13:28:58
redhat
redhat
(RHSA-2015:0323) Low: libvirt security, bug fix, and enhancement update
2015-03-05 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: libvirt-1.2.9.2-1.fc21
2015-02-15 03:07:07
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
gentoo
gentoo
libvirt: Denial of service
2014-12-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
2014-12-18 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2016-01-12 00:00:00
oraclelinux
oraclelinux
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
osv
osv
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2014-8136