Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-3657
HistoryOct 06, 2014 - 2:55 p.m.

CVE-2014-3657

2014-10-0614:55:10
CWE-399
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

Affected configurations

Nvd
Node
libvirtlibvirtRange≤1.2.8
OR
libvirtlibvirtMatch1.2.0
OR
libvirtlibvirtMatch1.2.1
OR
libvirtlibvirtMatch1.2.2
OR
libvirtlibvirtMatch1.2.3
OR
libvirtlibvirtMatch1.2.4
OR
libvirtlibvirtMatch1.2.5
OR
libvirtlibvirtMatch1.2.6
OR
libvirtlibvirtMatch1.2.7

Related

prion 1
veracode 1
ubuntucve 1
cvelist 1
cve 1
debiancve 1
redhat 2
openvas 12
securityvulns 4
nessus 15
mageia 1
oraclelinux 3
altlinux 1
centos 2
ubuntu 1
fedora 2
f5 2
osv 15
prion
prion
Command injection
2014-10-06 14:55:00
veracode
veracode
Denial Of Service (DoS)
2018-08-13 07:58:48
ubuntucve
ubuntucve
CVE-2014-3657
2014-10-06 00:00:00
cvelist
cvelist
CVE-2014-3657
2014-10-06 14:00:00
cve
cve
CVE-2014-3657
2014-10-06 14:55:10
debiancve
debiancve
CVE-2014-3657
2014-10-06 14:55:10
redhat
redhat
(RHSA-2014:1352) Moderate: libvirt security and bug fix update
2014-10-01 00:00:00
(RHSA-2014:1873) Moderate: libvirt security and bug fix update
2014-11-18 00:00:00
openvas
openvas
RedHat Update for libvirt RHSA-2014:1352-01
2014-10-02 00:00:00
CentOS Update for libvirt CESA-2014:1352 centos7
2014-10-04 00:00:00
Mageia: Security Advisory (MGASA-2014-0401)
2022-01-28 00:00:00
securityvulns
securityvulns
[USN-2404-1] libvirt vulnerabilities
2014-11-24 00:00:00
libvirt information leakage
2014-11-24 00:00:00
[ MDVSA-2014:195 ] libvirt
2014-10-05 00:00:00
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2014:1293-1)
2014-10-15 00:00:00
Oracle Linux 7 : libvirt (ELSA-2014-1352)
2014-10-02 00:00:00
openSUSE Security Update : libvirt (openSUSE-SU-2014:1290-1)
2014-10-15 00:00:00
mageia
mageia
Updated libvirt packages fix security vulnerbilities
2014-10-07 13:22:51
oraclelinux
oraclelinux
libvirt security and bug fix update
2014-10-01 00:00:00
libvirt security and bug fix update
2014-11-18 00:00:00
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.9-alt1
2014-10-03 00:00:00
centos
centos
libvirt security update
2014-10-03 18:13:17
libvirt security update
2014-11-18 18:46:17
ubuntu
ubuntu
libvirt vulnerabilities
2014-11-11 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libvirt-1.1.3.8-1.fc20
2014-11-22 12:37:22
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
f5
f5
K16117 : Multiple libvirt vulnerabilities
2015-02-12 00:00:00
SOL16117 - Multiple libvirt vulnerabilities
2015-02-12 00:00:00
osv
osv
CVE-2020-25637
2020-10-06 14:15:12
CVE-2019-3840
2019-03-27 13:29:01
CVE-2021-3975
2022-08-23 20:15:08

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON
Related for NVD:CVE-2014-3657
prion1veracode1ubuntucve1cvelist1cve1debiancve1redhat2openvas12securityvulns4nessus15mageia1oraclelinux3altlinux1centos2ubuntu1fedora2f52osv15