National Cyber Awareness System

Vulnerability Summary for CVE-2013-0170

Overview

Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6 before 0.9.6.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering certain errors during an RPC connection, which causes a message to be freed without being removed from the message queue.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=893450

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=893450

External Source: XF

Name: libvirt-virnetmessagefree-code-exec(81552)

Hyperlink:http://xforce.iss.net/xforce/xfdb/81552

External Source: UBUNTU

Name: USN-1708-1

Hyperlink:http://www.ubuntu.com/usn/USN-1708-1

External Source: SECTRACK

Name: 1028047

Hyperlink:http://www.securitytracker.com/id/1028047

External Source: BID

Name: 57578

Hyperlink:http://www.securityfocus.com/bid/57578

External Source: CONFIRM

Name: http://wiki.libvirt.org/page/Maintenance_Releases

Hyperlink:http://wiki.libvirt.org/page/Maintenance_Releases

External Source: SECUNIA

Name: 52003

Type: Advisory

Hyperlink:http://secunia.com/advisories/52003

External Source: SECUNIA

Name: 52001

Type: Advisory

Hyperlink:http://secunia.com/advisories/52001

External Source: REDHAT

Name: RHSA-2013:0199

Hyperlink:http://rhn.redhat.com/errata/RHSA-2013-0199.html

External Source: OSVDB

Name: 89644

Hyperlink:http://osvdb.org/89644

External Source: SUSE

Name: SUSE-SU-2013:0320

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html

External Source: SUSE

Name: openSUSE-SU-2013:0275

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html

External Source: SUSE

Name: openSUSE-SU-2013:0274

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html

External Source: FEDORA

Name: FEDORA-2013-1626

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html

External Source: FEDORA

Name: FEDORA-2013-1642

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html

External Source: FEDORA

Name: FEDORA-2013-1644

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html

External Source: CONFIRM

Name: http://libvirt.org/news.html

Hyperlink:http://libvirt.org/news.html

External Source: CONFIRM

Name: http://libvirt.org/git/?p=libvirt.git;a=commit;h=46532e3e8ed5f5a736a02f67d6c805492f9ca720

Hyperlink:http://libvirt.org/git/?p=libvirt.git;a=commit;h=46532e3e8ed5f5a736a02f67d6c805492f9ca720