REDHAT-BUG-857133: Medium severity Red Hat libvirt vulnerability

Published Sep 13, 2012

Updated

It has been found that sending RPC message with an event as the RPC number, or RPC number that falls into gap in the RPC dispatch table, can lead to libvirtd accessing memory at page zero. A remote attacker could use this flaw to crash libvirtd (DoS).

Proposed upstream fix: https://www.redhat.com/archives/libvir-list/2012-September/msg00843.html

Affected Software

1 affected component

Red Hat libvirt

Event History

Sep 13, 2012

Data Sourced

04:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-857133?

The severity of REDHAT-BUG-857133 is considered critical as it can lead to denial of service by crashing the libvirtd service.

How do I fix REDHAT-BUG-857133?

To fix REDHAT-BUG-857133, ensure your system is updated with the latest security patches and fixes provided by Red Hat.

What systems are affected by REDHAT-BUG-857133?

Systems running the Red Hat libvirt service are affected by REDHAT-BUG-857133.

Can REDHAT-BUG-857133 be exploited remotely?

Yes, REDHAT-BUG-857133 can be exploited remotely by an attacker to cause a denial of service.

What is the potential impact of REDHAT-BUG-857133 on libvirtd?

The potential impact of REDHAT-BUG-857133 on libvirtd is that it may lead to undesirable crashes and service interruptions.