GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Wed Sep 25, 2013 6:26 pm Post subject: [ GLSA 201309-18 ] libvirt: Multiple vulnerabilities |
|
|
Gentoo Linux Security Advisory
Title: libvirt: Multiple vulnerabilities (GLSA 201309-18)
Severity: normal
Exploitable: remote
Date: September 25, 2013
Bug(s): #454588, #470096
ID: 201309-18
Synopsis
Multiple vulnerabilities have been found in libvirt, allowing
remote attackers to execute arbitrary code or cause Denial of Service.
Background
libvirt is a C toolkit for manipulating virtual machines.
Affected Packages
Package: app-emulation/libvirt
Vulnerable: < 1.0.5.1-r3
Unaffected: >= 1.0.5.1-r3
Architectures: All supported architectures
Description
An error in the virNetMessageFree() function in rpc/virnetserverclient.c
can lead to a use-after-free. Additionally, a socket leak in the
remoteDispatchStoragePoolListAllVolumes command can lead to file
descriptor exhaustion.
Impact
A remote attacker could cause certain errors during an RPC connection to
cause a message to be freed without being removed from the message queue,
possibly resulting in execution of arbitrary code or a Denial of Service
condition. Additionally, a remote attacker could repeatedly issue the
command to list all pool volumes, causing a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All libvirt users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose
">=app-emulation/libvirt-1.0.5.1-r3"
|
References
CVE-2013-0170
CVE-2013-1962 |
|