REDHAT-BUG-1077620
First published: Tue Mar 18 2014(Updated: )
Description of the problem: Domblkstat is possible even with read-only connection, so whenever migration with spice is done and domblkstat gets called at the same time as qemuMonitorGetSpiceMigrationStatus(), there is certain possibility that the daemon crashes. An unprivileged user able to issue commands to running libvirtd could use this flaw to crash libvirtd and prevent more privileged clients from working correctly. Upstream fix: <a href="http://libvirt.org/git/?p=libvirt.git;a=commit;h=484cc321">http://libvirt.org/git/?p=libvirt.git;a=commit;h=484cc321</a> Acknowledgements: This issue was discovered by Marian Krcmarik of Red Hat.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libvirt |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://libvirt.org/git/?p=libvirt.git;a=commit;h=484cc321
- http://rhn.redhat.com/errata/RHBA-2013-1581.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1077620#c1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=920205
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1077620#c2
- https://bugzilla.redhat.com/show_bug.cgi?id=1077620
Frequently Asked Questions
What is the severity of REDHAT-BUG-1077620?
The severity of REDHAT-BUG-1077620 is considered to be critical due to the potential for daemon crashes during migration.
How do I fix REDHAT-BUG-1077620?
To fix REDHAT-BUG-1077620, ensure you apply the latest patches provided by Red Hat for libvirt.
Which versions of libvirt are affected by REDHAT-BUG-1077620?
All versions of libvirt that contain the specific bug are affected, so checking the changelog and updates is essential.
Can unprivileged users exploit REDHAT-BUG-1077620?
Yes, unprivileged users can potentially exploit the vulnerability in REDHAT-BUG-1077620 during migration operations.
What conditions lead to the crash in REDHAT-BUG-1077620?
The crash in REDHAT-BUG-1077620 occurs when domblkstat is called simultaneously with qemuMonitorGetSpiceMigrationStatus during migration.
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/severity
- agent/description
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-7336
- agent/source
- agent/tags
- vendor/red hat
- canonical/libvirt