CVE-2014-8136: Low severity mageia vulnerability
Published Dec 19, 2014
·Updated
The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.
Affected Software
12 affected components
Mageia Mageia=4.0
redhat libvirt
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.04
Canonical Ubuntu Linux=15.10
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
redhat Enterprise Linux Desktop=7.0
redhat Enterprise Linux Hpc Node=7.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Workstation=7.0
Event History
Dec 19, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8136?
CVE-2014-8136 has a moderate severity rating as it allows local users to cause a denial of service.
2
How do I fix CVE-2014-8136?
To address CVE-2014-8136, update the affected versions of libvirt and ensure proper ACL configurations are implemented.
3
Which software is affected by CVE-2014-8136?
CVE-2014-8136 affects various versions of libvirt on Mageia, Red Hat, and Ubuntu, as well as OpenSUSE.
4
What vulnerabilities are associated with CVE-2014-8136?
CVE-2014-8136 is primarily associated with improper ACL checks in the qemuDomainMigrate functions.
5
Can CVE-2014-8136 be exploited remotely?
CVE-2014-8136 cannot be exploited remotely as it requires local user access to the system.