Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4154
HistorySep 30, 2013 - 12:00 a.m.

CVE-2013-4154

2013-09-3000:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.014

Percentile

86.4%

The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent
is not configured, allows remote attackers to cause a denial of service
(NULL pointer dereference and crash) via vectors related to “agent based
cpu (un)plug,” as demonstrated by the “virsh vcpucount foobar --guest”
command.

Bugs

Notes

Author Note
mdeslaur Introduced by: http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=d47eff88fe50e43a36671f6d8d0eeda52835d5e0 which is in 1.1.0

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.014

Percentile

86.4%