Vulnerability in Redhat Libvirt
CVE-2014-1447
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
Vulnerability class: Race Condition
EPSS: 0.117 (93.8th percentile) — read the EPSS interpretation.
Affected products
- Redhat Libvirt — versions 0.0.1, 0.0.2, 0.0.3
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- USN-2093-1 (x_refsource_UBUNTU, vendor-advisory)
- 56446 (x_refsource_SECUNIA, third-party-advisory)
- DSA-2846 (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM)
- 60895 (x_refsource_SECUNIA, third-party-advisory)
- GLSA-201412-04 (vendor-advisory, x_refsource_GENTOO)
- 56321 (x_refsource_SECUNIA, third-party-advisory)
- openSUSE-SU-2014:0268 (vendor-advisory, x_refsource_SUSE)
- 1029695 (vdb-entry, x_refsource_SECTRACK)
- RHSA-2014:0103 (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2014-1447?
- CVE-2014-1447 is a vulnerability in Redhat Libvirt, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2014-01-24.
- Is CVE-2014-1447 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.