REDHAT-BUG-844734: Medium severity Red Hat libvirt vulnerability

Published Jul 31, 2012

Updated

It has been found that sending crafted RPC command with nparams set to 0 can lead to libvirtd accessing random memory, possibly leading to crash. A remote attacker could use this flaw to crash libvirtd (DoS).

Upstream proposed fix: https://www.redhat.com/archives/libvir-list/2012-July/msg01650.html

Affected Software

1 affected component

Red Hat libvirt

Event History

Jul 31, 2012

Data Sourced

02:49 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-844734?

The severity of REDHAT-BUG-844734 is classified as a denial of service (DoS) vulnerability.

How do I fix REDHAT-BUG-844734?

To fix REDHAT-BUG-844734, apply the relevant patches or updates provided by Red Hat for libvirt.

Who is affected by REDHAT-BUG-844734?

The vulnerability REDHAT-BUG-844734 affects users of Red Hat libvirt.

What kind of attack scenario is associated with REDHAT-BUG-844734?

REDHAT-BUG-844734 can be exploited by a remote attacker sending crafted RPC commands to crash the libvirtd service.

What is the impact of exploiting REDHAT-BUG-844734?

Exploiting REDHAT-BUG-844734 can lead to the libvirtd service accessing random memory, resulting in a crash.