[ GLSA 201412-04 ] libvirt: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: libvirt: Multiple vulnerabilities (GLSA 201412-04)
Severity: high
Exploitable: local, remote
Date: December 08, 2014
Bug(s): #483048, #484014, #485520, #487684, #489374, #494072, #496204, #498534, #502232, #504996, #509858, #524184, #528440
ID: 201412-04

Synopsis

Multiple vulnerabilities have been found in libvirt, worst of which
allows context-dependent attackers to escalate privileges.


Background

libvirt is a C toolkit for manipulating virtual machines.

Affected Packages

Package: app-emulation/libvirt
Vulnerable: < 1.2.9-r2
Unaffected: >= 1.2.9-r2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in libvirt. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker may be able to cause a Denial of Service or cause
information leakage. A local attacker may be able to escalate privileges,
cause a Denial of Service or possibly execute arbitrary code.


Workaround

There is no known workaround at this time.

Resolution

All libvirt users should upgrade to the latest version: