CVE-2013-2124: Double Free
Published May 27, 2014
·Updated
Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files.
Affected Software
49 affected components
libguestfs libguestfs=1.20.0
libguestfs libguestfs=1.20.1
libguestfs libguestfs=1.20.2
libguestfs libguestfs=1.20.3
libguestfs libguestfs=1.20.4
libguestfs libguestfs=1.20.5
libguestfs libguestfs=1.20.6
libguestfs libguestfs=1.21.1
libguestfs libguestfs=1.21.2
libguestfs libguestfs=1.21.3
libguestfs libguestfs=1.21.4
libguestfs libguestfs=1.21.5
libguestfs libguestfs=1.21.6
libguestfs libguestfs=1.21.7
libguestfs libguestfs=1.21.8
libguestfs libguestfs=1.21.9
libguestfs libguestfs=1.21.10
libguestfs libguestfs=1.21.11
libguestfs libguestfs=1.21.12
libguestfs libguestfs=1.21.13
libguestfs libguestfs=1.21.14
libguestfs libguestfs=1.21.15
libguestfs libguestfs=1.21.16
libguestfs libguestfs=1.21.17
libguestfs libguestfs=1.21.18
libguestfs libguestfs=1.21.19
libguestfs libguestfs=1.21.20
libguestfs libguestfs=1.21.21
libguestfs libguestfs=1.21.22
libguestfs libguestfs=1.21.23
libguestfs libguestfs=1.21.24
libguestfs libguestfs=1.21.25
libguestfs libguestfs=1.21.26
libguestfs libguestfs=1.21.27
libguestfs libguestfs=1.21.28
libguestfs libguestfs=1.21.29
libguestfs libguestfs=1.21.30
libguestfs libguestfs=1.21.31
libguestfs libguestfs=1.21.32
libguestfs libguestfs=1.21.33
libguestfs libguestfs=1.21.34
libguestfs libguestfs=1.21.35
libguestfs libguestfs=1.21.36
libguestfs libguestfs=1.21.37
libguestfs libguestfs=1.21.38
libguestfs libguestfs=1.21.39
libguestfs libguestfs=1.21.40
libguestfs libguestfs=1.22.0
libguestfs libguestfs=1.23.0
Remediation
Patch Available
Event History
May 27, 2014
CVE Published
02:55 PM
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2124?
CVE-2013-2124 has a severity rating of medium due to its ability to cause denial of service.
2
How do I fix CVE-2013-2124?
To fix CVE-2013-2124, update LibguestFS to versions 1.20.7, 1.21.x, 1.22.0, or 1.23.0 and above.
3
What causes CVE-2013-2124?
CVE-2013-2124 is caused by a double free vulnerability in inspect-fs.c that allows remote attackers to crash the system.
4
Who is affected by CVE-2013-2124?
CVE-2013-2124 affects users of LibguestFS versions 1.20.0 through 1.20.6, and certain 1.21.x, 1.22.0, and 1.23.0 versions.
5
What type of vulnerability is CVE-2013-2124?
CVE-2013-2124 is a double free vulnerability leading to potential denial of service.