REDHAT-BUG-986386: Medium severity Red Hat libvirt vulnerability

Published Jul 19, 2013

Updated

If users haven't configured guest agent then qemuAgentCommand() will dereference a NULL 'mon' pointer.

A remote user able to issue commands to libvirt daemon could use this flaw to crash libvirtd.

References: https://bugzilla.redhat.com/showbug.cgi?id=984821 https://www.redhat.com/archives/libvir-list/2013-July/msg00992.html

Acknowledgements:

This issue was discovered by Alex Jia of Red Hat.

Affected Software

1 affected component

Red Hat libvirt

Jul 19, 2013

Data Sourced

04:07 PM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-986386 is considered moderate, as it allows a remote user to crash the libvirtd service.

To fix REDHAT-BUG-986386, ensure that the guest agent is properly configured to avoid NULL pointer dereferencing.

Users of Red Hat libvirt without a configured guest agent are affected by REDHAT-BUG-986386.

An attacker could issue commands to the libvirt daemon and potentially crash libvirtd due to this vulnerability.

Currently, the best workaround for REDHAT-BUG-986386 is to disable remote command access to the libvirt daemon until it is properly patched.