First published: Sun Jan 05 2014(Updated: )
An invalid free flaw in the libxl driver in libvirt resulted in libvirt crashing if "virsh numatune" was run on an inactive domain. It may be possible, but unlikely, for an attacker to leverage this flaw for arbitrary code execution. This issue affects the version of libvirt in Fedora 20. It does not affect the versions of libvirt in Red Hat Enterprise Linux 5 and 6 as those versions do not use libxl.
Affected Software | Affected Version | How to fix |
---|---|---|
libvirt |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-1048629 is considered high due to its potential to crash libvirt.
To fix REDHAT-BUG-1048629, update libvirt to a version that addresses the invalid free flaw.
REDHAT-BUG-1048629 may allow for arbitrary code execution, although it is considered unlikely.
REDHAT-BUG-1048629 affects the version of libvirt in Fedora 20.
Exploitation of REDHAT-BUG-1048629 would require local access to the system, making a remote exploit unlikely.