CVE-2014-1447: Race Condition
Published Jan 24, 2014
·Updated
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
Affected Software
110 affected components
redhat libvirt<=1.2.0
redhat libvirt=0.0.1
redhat libvirt=0.0.2
redhat libvirt=0.0.3
redhat libvirt=0.0.4
redhat libvirt=0.0.5
redhat libvirt=0.0.6
redhat libvirt=0.1.0
redhat libvirt=0.1.1
redhat libvirt=0.1.3
redhat libvirt=0.1.4
redhat libvirt=0.1.5
redhat libvirt=0.1.6
redhat libvirt=0.1.7
redhat libvirt=0.1.8
redhat libvirt=0.1.9
redhat libvirt=0.2.0
redhat libvirt=0.2.1
redhat libvirt=0.2.2
redhat libvirt=0.2.3
redhat libvirt=0.3.0
redhat libvirt=0.3.1
redhat libvirt=0.3.2
redhat libvirt=0.3.3
redhat libvirt=0.4.0
redhat libvirt=0.4.1
redhat libvirt=0.4.2
redhat libvirt=0.4.3
redhat libvirt=0.4.4
redhat libvirt=0.4.5
redhat libvirt=0.4.6
redhat libvirt=0.5.0
redhat libvirt=0.5.1
redhat libvirt=0.6.0
redhat libvirt=0.6.1
redhat libvirt=0.6.2
redhat libvirt=0.6.3
redhat libvirt=0.6.4
redhat libvirt=0.6.5
redhat libvirt=0.7.0
redhat libvirt=0.7.1
redhat libvirt=0.7.2
redhat libvirt=0.7.3
redhat libvirt=0.7.4
redhat libvirt=0.7.5
redhat libvirt=0.7.6
redhat libvirt=0.7.7
redhat libvirt=0.8.0
redhat libvirt=0.8.1
redhat libvirt=0.8.2
redhat libvirt=0.8.3
redhat libvirt=0.8.4
redhat libvirt=0.8.5
redhat libvirt=0.8.6
redhat libvirt=0.8.7
redhat libvirt=0.8.8
redhat libvirt=0.9.0
redhat libvirt=0.9.1
redhat libvirt=0.9.2
redhat libvirt=0.9.3
redhat libvirt=0.9.4
redhat libvirt=0.9.5
redhat libvirt=0.9.6
redhat libvirt=0.9.6.1
redhat libvirt=0.9.6.2
redhat libvirt=0.9.6.3
redhat libvirt=0.9.7
redhat libvirt=0.9.8
redhat libvirt=0.9.9
redhat libvirt=0.9.10
redhat libvirt=0.9.11
redhat libvirt=0.9.11.1
redhat libvirt=0.9.11.2
redhat libvirt=0.9.11.3
redhat libvirt=0.9.11.4
redhat libvirt=0.9.11.5
redhat libvirt=0.9.11.6
redhat libvirt=0.9.11.7
redhat libvirt=0.9.11.8
redhat libvirt=0.9.12
redhat libvirt=0.9.13
redhat libvirt=0.10.0
redhat libvirt=0.10.1
redhat libvirt=0.10.2
redhat libvirt=0.10.2.1
redhat libvirt=0.10.2.2
redhat libvirt=0.10.2.3
redhat libvirt=0.10.2.4
redhat libvirt=0.10.2.5
redhat libvirt=0.10.2.6
redhat libvirt=0.10.2.7
redhat libvirt=0.10.2.8
redhat libvirt=1.0.0
redhat libvirt=1.0.1
redhat libvirt=1.0.2
redhat libvirt=1.0.3
redhat libvirt=1.0.4
redhat libvirt=1.0.5
redhat libvirt=1.0.5.1
redhat libvirt=1.0.5.2
redhat libvirt=1.0.5.3
redhat libvirt=1.0.5.4
redhat libvirt=1.0.5.5
redhat libvirt=1.0.5.6
redhat libvirt=1.0.6
redhat libvirt=1.1.0
redhat libvirt=1.1.1
redhat libvirt=1.1.2
redhat libvirt=1.1.3
redhat libvirt=1.1.4
Event History
Jan 24, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1447?
The severity of CVE-2014-1447 is classified as high due to its potential to cause denial of service.
2
How do I fix CVE-2014-1447?
To fix CVE-2014-1447, update to libvirt version 1.2.1 or later.
3
What systems are affected by CVE-2014-1447?
CVE-2014-1447 affects versions of libvirt prior to 1.2.1, specifically those below 1.2.1 and all versions up to 1.2.0.
4
What kind of attack is associated with CVE-2014-1447?
CVE-2014-1447 is associated with remote denial of service attacks which can crash the libvirtd process.
5
When was CVE-2014-1447 published?
CVE-2014-1447 was published on February 18, 2014.