CVE-2013-6436: Null Pointer Dereference
The lxcDomainGetMemoryParameters method in lxc/lxcdriver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6436?
CVE-2013-6436 has a medium severity rating due to its potential to cause a denial of service by crashing the libvirtd process.
How do I fix CVE-2013-6436?
To fix CVE-2013-6436, update libvirt to a version later than 1.2.0 where the vulnerability has been addressed.
Which versions of libvirt are affected by CVE-2013-6436?
CVE-2013-6436 affects libvirt versions 1.0.5 through 1.2.0.
What type of attack does CVE-2013-6436 enable?
CVE-2013-6436 enables local users to launch a denial of service attack by causing a NULL pointer dereference.
Who is impacted by CVE-2013-6436?
CVE-2013-6436 impacts local users who can interact with LXC guests in a libvirt environment, potentially allowing them to crash the libvirtd service.