Vulnerability in Red Hat Libvirt

CVE-2013-4292

libvirt 1.1.0 and 1.1.1 allows local users to cause a denial of service (memory consumption) via a large number of domain migrate parameters in certain RPC calls in (1) daemon/remote.c and (2) remote/remote_driver.c.

EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.

Affected products

Redhat Libvirt — versions 1.1.0, 1.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
secalert@redhat.com (mailing-list, x_refsource_MLIST)