CVE-2013-6458

Published Jan 24, 2014

Last updated 10 years ago

Overview

Description
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
Source
secalert@redhat.com
NVD status
Analyzed

Risk scores

CVSS 2.0

Type
Primary
Base score
6.8
Impact score
10
Exploitability score
3.2
Vector string
AV:A/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-362

Social media

Hype score
Not currently trending

Configurations