Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-8136
HistoryDec 19, 2014 - 3:59 p.m.

CVE-2014-8136

2014-12-1915:59:10
CWE-264
[email protected]
web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

JSON

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

Affected configurations

NVD
Node
mageiamageiaMatch4.0
Node
redhatlibvirtMatch-
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.04
OR
canonicalubuntu_linuxMatch15.10
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch7.0

Related

cve 1
nessus 13
mageia 1
cvelist 1
ubuntucve 1
openvas 8
debiancve 1
securityvulns 2
prion 1
centos 1
redhat 1
fedora 2
gentoo 1
altlinux 1
ubuntu 1
oraclelinux 1
osv 15
cve
cve
CVE-2014-8136
2014-12-19 15:59:10
nessus
nessus
openSUSE Security Update : libvirt (openSUSE-SU-2015:0006-1)
2015-01-05 00:00:00
Mandriva Linux Security Advisory : libvirt (MDVSA-2015:023)
2015-01-16 00:00:00
Scientific Linux Security Update : libvirt on SL7.x x86_64 (20150305)
2015-03-26 00:00:00
mageia
mageia
Updated libvirt packages fix CVE-2014-8136
2015-01-05 19:30:30
cvelist
cvelist
CVE-2014-8136
2014-12-19 15:00:00
ubuntucve
ubuntucve
CVE-2014-8136
2014-12-19 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0002)
2022-01-28 00:00:00
RedHat Update for libvirt RHSA-2015:0323-01
2015-03-06 00:00:00
Oracle: Security Advisory (ELSA-2015-0323)
2015-10-06 00:00:00
debiancve
debiancve
CVE-2014-8136
2014-12-19 15:59:10
securityvulns
securityvulns
libvirt / qemu DoS
2015-01-18 00:00:00
[ MDVSA-2015:023 ] libvirt
2015-01-18 00:00:00
prion
prion
Design/Logic Flaw
2014-12-19 15:59:00
centos
centos
libvirt security update
2015-03-17 13:28:58
redhat
redhat
(RHSA-2015:0323) Low: libvirt security, bug fix, and enhancement update
2015-03-05 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: libvirt-1.2.9.2-1.fc21
2015-02-15 03:07:07
[SECURITY] Fedora 20 Update: libvirt-1.1.3.9-1.fc20
2015-02-17 08:10:35
gentoo
gentoo
libvirt: Denial of service
2014-12-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libvirt version 1.2.11-alt1
2014-12-18 00:00:00
ubuntu
ubuntu
libvirt vulnerabilities
2016-01-12 00:00:00
oraclelinux
oraclelinux
libvirt security, bug fix, and enhancement update
2015-03-11 00:00:00
osv
osv
CVE-2020-25637
2020-10-06 14:15:12
CVE-2021-3631
2022-03-02 23:15:08
CVE-2020-10703
2020-06-02 13:15:10

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2014-8136
cve1nessus13mageia1cvelist1ubuntucve1openvas8debiancve1securityvulns2prion1centos1redhat1fedora2gentoo1altlinux1ubuntu1oraclelinux1osv15