CVE-2013-6458: Race Condition
First published: Fri Jan 24 2014(Updated: )
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | <=1.2.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.0.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.8 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.1.9 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.2.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.2.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.2.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.2.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.3.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.3.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.3.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.3.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.4.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.5.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.5.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.6.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.7.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.8.8 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.6.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.6.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.6.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.8 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.9 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.10 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.11.8 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.12 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.9.13 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.7 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =0.10.2.8 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.4 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.5 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.5.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.0.6 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.1.0 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.1.1 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.1.2 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.1.3 | |
| Red Hat Libvirt-daemon-driver-storage-iscsi-direct | =1.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://libvirt.org/news.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html
- http://rhn.redhat.com/errata/RHSA-2014-0103.html
- http://secunia.com/advisories/56186
- http://secunia.com/advisories/56446
- http://secunia.com/advisories/60895
- http://security.gentoo.org/glsa/glsa-201412-04.xml
- http://www.debian.org/security/2014/dsa-2846
- http://www.ubuntu.com/usn/USN-2093-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1043069
Frequently Asked Questions
What is the severity of CVE-2013-6458?
CVE-2013-6458 has been classified with a moderate severity level due to its potential to cause a denial of service.
How do I fix CVE-2013-6458?
To resolve CVE-2013-6458, upgrade libvirt to version 1.2.1 or later.
Who is affected by CVE-2013-6458?
CVE-2013-6458 affects multiple versions of Red Hat Libvirt prior to 1.2.1.
What are the implications of CVE-2013-6458?
The implications of CVE-2013-6458 include the possibility of remote read-only attackers causing a denial of service.
What functions are affected by CVE-2013-6458?
CVE-2013-6458 impacts the virDomainBlockStats, virDomainGetBlockInf, qemuDomainBlockJobImpl, and virDomainGetBlockIoTune functions.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/red hat libvirt-daemon-driver-storage-iscsi-direct
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.2.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.0.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.8
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.1.9
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.2.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.2.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.2.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.2.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.3.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.3.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.3.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.3.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.4.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.5.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.5.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.6.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.7.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.8.8
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.6.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.6.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.6.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.8
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.9
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.10
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.11.8
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.12
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.9.13
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.7
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/0.10.2.8
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.4
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.5
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.5.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.0.6
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.1.0
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.1.1
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.1.2
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.1.3
- version/red hat libvirt-daemon-driver-storage-iscsi-direct/1.1.4