CVE-2014-8135: Null Pointer Dereference
Published Dec 19, 2014
·Updated
The storageVolUpload function in storage/storagedriver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted offset value in a "virsh vol-upload" command.
Affected Software
1 affected component
redhat libvirt
Event History
Dec 19, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8135?
CVE-2014-8135 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2014-8135?
To fix CVE-2014-8135, upgrade libvirt to version 1.2.11 or later where the vulnerability is addressed.
3
Who is affected by CVE-2014-8135?
CVE-2014-8135 affects users of libvirt versions prior to 1.2.11.
4
What type of attack does CVE-2014-8135 facilitate?
CVE-2014-8135 facilitates a local denial of service attack through a NULL pointer dereference.
5
What software components are involved in CVE-2014-8135?
CVE-2014-8135 involves the storageVolUpload function in the libvirt storage driver.