CVE-2013-1962: Medium severity red hat libvirt-daemon-driver-storage-iscsi-direct vulnerability
A denial of service flaw was found in the way storage pool manager of libvirt, a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes), performed management of socket file descriptors when 'to list all volumes for the particular pool' request was issued (two socket file descriptors were leaked per "list all pool volumes" request). An uprivileged user could use this flaw to cause denial of service (make libvirtd daemon to exhaust / reach the maximum count of open file descriptors, the libvirtd daemon process was allowed to open, possibly preventing other users from use of libvirtd services till the libvirtd daemon was restarted).
Acknowledgements:
Red Hat would like to thank Edoardo Comar of IBM for reporting this issue.
Other sources
The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1962?
CVE-2013-1962 is classified as a denial of service vulnerability.
How do I fix CVE-2013-1962?
To fix CVE-2013-1962, upgrade libvirt to a version that addresses this vulnerability.
Which versions of libvirt are affected by CVE-2013-1962?
CVE-2013-1962 specifically affects libvirt version 1.0.5.
What type of vulnerability is CVE-2013-1962?
CVE-2013-1962 is a denial of service flaw related to socket file descriptor management.
Can CVE-2013-1962 be exploited remotely?
Yes, CVE-2013-1962 can potentially be exploited remotely if the affected service is exposed.