libvirt vulnerability

2011-07-2800:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

7.6

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

libvirt - Libvirt virtualization toolkit

Details

Eric Blake discovered an integer overflow flaw in libvirt. A remote
authenticated attacker could exploit this by sending a crafted VCPU RPC
call and cause a denial of service via application crash.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchlibvirt-bin< 0.8.8-1ubuntu6.5UNKNOWN
Ubuntu11.04noarchlibvirt-dev< 0.8.8-1ubuntu6.5UNKNOWN
Ubuntu11.04noarchlibvirt0< 0.8.8-1ubuntu6.5UNKNOWN
Ubuntu11.04noarchlibvirt0-dbg< 0.8.8-1ubuntu6.5UNKNOWN
Ubuntu11.04noarchpython-libvirt< 0.8.8-1ubuntu6.5UNKNOWN
Ubuntu10.10noarchlibvirt-bin< 0.8.3-1ubuntu19.1UNKNOWN
Ubuntu10.10noarchlibvirt-dev< 0.8.3-1ubuntu19.1UNKNOWN
Ubuntu10.10noarchlibvirt0< 0.8.3-1ubuntu19.1UNKNOWN
Ubuntu10.10noarchlibvirt0-dbg< 0.8.3-1ubuntu19.1UNKNOWN
Ubuntu10.10noarchpython-libvirt< 0.8.3-1ubuntu19.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	libvirt-bin	< 0.8.8-1ubuntu6.5	UNKNOWN
Ubuntu	11.04	noarch	libvirt-dev	< 0.8.8-1ubuntu6.5	UNKNOWN
Ubuntu	11.04	noarch	libvirt0	< 0.8.8-1ubuntu6.5	UNKNOWN
Ubuntu	11.04	noarch	libvirt0-dbg	< 0.8.8-1ubuntu6.5	UNKNOWN
Ubuntu	11.04	noarch	python-libvirt	< 0.8.8-1ubuntu6.5	UNKNOWN
Ubuntu	10.10	noarch	libvirt-bin	< 0.8.3-1ubuntu19.1	UNKNOWN
Ubuntu	10.10	noarch	libvirt-dev	< 0.8.3-1ubuntu19.1	UNKNOWN
Ubuntu	10.10	noarch	libvirt0	< 0.8.3-1ubuntu19.1	UNKNOWN
Ubuntu	10.10	noarch	libvirt0-dbg	< 0.8.3-1ubuntu19.1	UNKNOWN
Ubuntu	10.10	noarch	python-libvirt	< 0.8.3-1ubuntu19.1	UNKNOWN