CVE-2012-4423: Null Pointer Dereference
It has been found that sending RPC message with an event as the RPC number, or RPC number that falls into gap in the RPC dispatch table, can lead to libvirtd accessing memory at page zero. A remote attacker could use this flaw to crash libvirtd (DoS).
Proposed upstream fix: https://www.redhat.com/archives/libvir-list/2012-September/msg00843.html
Other sources
The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and segmentation fault) via an RPC call with (1) an event as the RPC number or (2) an RPC number whose value is in a "gap" in the RPC dispatch table.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4423?
The severity of CVE-2012-4423 is classified as high due to its potential to cause a denial of service.
How do I fix CVE-2012-4423?
To fix CVE-2012-4423, upgrade to the latest version of libvirt that addresses this vulnerability.
Who is affected by CVE-2012-4423?
CVE-2012-4423 affects versions of libvirt from 0.10.1 and earlier.
What type of attack does CVE-2012-4423 enable?
CVE-2012-4423 enables a remote attacker to cause a crash of the libvirtd service, resulting in a denial of service.
Is there a patch available for CVE-2012-4423?
Yes, a patch to address CVE-2012-4423 has been proposed and is available in newer versions of libvirt.