Vulnerability in Red Hat Libvirt

CVE-2013-2218

Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.

EPSS: 0.083 (94.3th percentile) — read the EPSS interpretation.

Affected products

Redhat Libvirt — versions 1.0.6
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

secalert@redhat.com (x_refsource_CONFIRM, Exploit)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Patch)
secalert@redhat.com (x_refsource_CONFIRM)