CVE-2013-5651: Buffer Overflow
Published Sep 30, 2013
·Updated
The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonstrated by a large nodeset value to numatune.
Affected Software
106 affected components
redhat libvirt<=1.1.1
redhat libvirt=0.0.1
redhat libvirt=0.0.2
redhat libvirt=0.0.3
redhat libvirt=0.0.4
redhat libvirt=0.0.5
redhat libvirt=0.0.6
redhat libvirt=0.1.0
redhat libvirt=0.1.1
redhat libvirt=0.1.3
redhat libvirt=0.1.4
redhat libvirt=0.1.5
redhat libvirt=0.1.6
redhat libvirt=0.1.7
redhat libvirt=0.1.8
redhat libvirt=0.1.9
redhat libvirt=0.2.0
redhat libvirt=0.2.1
redhat libvirt=0.2.2
redhat libvirt=0.2.3
redhat libvirt=0.3.0
redhat libvirt=0.3.1
redhat libvirt=0.3.2
redhat libvirt=0.3.3
redhat libvirt=0.4.0
redhat libvirt=0.4.1
redhat libvirt=0.4.2
redhat libvirt=0.4.3
redhat libvirt=0.4.4
redhat libvirt=0.4.5
redhat libvirt=0.4.6
redhat libvirt=0.5.0
redhat libvirt=0.5.1
redhat libvirt=0.6.0
redhat libvirt=0.6.1
redhat libvirt=0.6.2
redhat libvirt=0.6.3
redhat libvirt=0.6.4
redhat libvirt=0.6.5
redhat libvirt=0.7.0
redhat libvirt=0.7.1
redhat libvirt=0.7.2
redhat libvirt=0.7.3
redhat libvirt=0.7.4
redhat libvirt=0.7.5
redhat libvirt=0.7.6
redhat libvirt=0.7.7
redhat libvirt=0.8.0
redhat libvirt=0.8.1
redhat libvirt=0.8.2
redhat libvirt=0.8.3
redhat libvirt=0.8.4
redhat libvirt=0.8.5
redhat libvirt=0.8.6
redhat libvirt=0.8.7
redhat libvirt=0.8.8
redhat libvirt=0.9.0
redhat libvirt=0.9.1
redhat libvirt=0.9.2
redhat libvirt=0.9.3
redhat libvirt=0.9.4
redhat libvirt=0.9.5
redhat libvirt=0.9.6
redhat libvirt=0.9.6.1
redhat libvirt=0.9.6.2
redhat libvirt=0.9.6.3
redhat libvirt=0.9.7
redhat libvirt=0.9.8
redhat libvirt=0.9.9
redhat libvirt=0.9.10
redhat libvirt=0.9.11
redhat libvirt=0.9.11.1
redhat libvirt=0.9.11.2
redhat libvirt=0.9.11.3
redhat libvirt=0.9.11.4
redhat libvirt=0.9.11.5
redhat libvirt=0.9.11.6
redhat libvirt=0.9.11.7
redhat libvirt=0.9.11.8
redhat libvirt=0.9.12
redhat libvirt=0.9.13
redhat libvirt=0.10.0
redhat libvirt=0.10.1
redhat libvirt=0.10.2
redhat libvirt=0.10.2.1
redhat libvirt=0.10.2.2
redhat libvirt=0.10.2.3
redhat libvirt=0.10.2.4
redhat libvirt=0.10.2.5
redhat libvirt=0.10.2.6
redhat libvirt=0.10.2.7
redhat libvirt=0.10.2.8
redhat libvirt=1.0.0
redhat libvirt=1.0.1
redhat libvirt=1.0.2
redhat libvirt=1.0.3
redhat libvirt=1.0.4
redhat libvirt=1.0.5
redhat libvirt=1.0.5.1
redhat libvirt=1.0.5.2
redhat libvirt=1.0.5.3
redhat libvirt=1.0.5.4
redhat libvirt=1.0.5.5
redhat libvirt=1.0.5.6
redhat libvirt=1.0.6
redhat libvirt=1.1.0
Remediation
Patch Available
Patch Available
Event History
Sep 30, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5651?
CVE-2013-5651 has a severity rating of medium due to its potential to cause denial of service.
2
How do I fix CVE-2013-5651?
To mitigate CVE-2013-5651, upgrade libvirt to version 1.1.2 or later.
3
What types of attacks can exploit CVE-2013-5651?
CVE-2013-5651 can be exploited through crafted bitmaps that trigger out-of-bounds reads, leading to application crashes.
4
Which versions of libvirt are affected by CVE-2013-5651?
CVE-2013-5651 affects all versions of libvirt prior to 1.1.2.
5
Is my system vulnerable to CVE-2013-5651 if I am using an updated version of libvirt?
No, if you are using libvirt version 1.1.2 or higher, your system is not vulnerable to CVE-2013-5651.