REDHAT-BUG-1048629: Medium severity oracle libvirt vulnerability
An invalid free flaw in the libxl driver in libvirt resulted in libvirt crashing if "virsh numatune" was run on an inactive domain. It may be possible, but unlikely, for an attacker to leverage this flaw for arbitrary code execution.
This issue affects the version of libvirt in Fedora 20. It does not affect the versions of libvirt in Red Hat Enterprise Linux 5 and 6 as those versions do not use libxl.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1048629?
The severity of REDHAT-BUG-1048629 is considered high due to its potential to crash libvirt.
How do I fix REDHAT-BUG-1048629?
To fix REDHAT-BUG-1048629, update libvirt to a version that addresses the invalid free flaw.
What impact does REDHAT-BUG-1048629 have on system security?
REDHAT-BUG-1048629 may allow for arbitrary code execution, although it is considered unlikely.
Which versions of libvirt are affected by REDHAT-BUG-1048629?
REDHAT-BUG-1048629 affects the version of libvirt in Fedora 20.
Can REDHAT-BUG-1048629 be exploited remotely?
Exploitation of REDHAT-BUG-1048629 would require local access to the system, making a remote exploit unlikely.