Vulnetix
Try Vulnetix Request Demo
CVE-2014-3657 PUBLISHED

The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service (deadlock) via a NULL value in the second parameter in the virConnectListAllDomains API command.

EPSS 1.28% · 79.5th percentile

Risk Scores

EPSS Score
1.28%
79.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibvirt0, 1.1.1-0ubuntu8, 1.1.1-0ubuntu9

Timeline

References

Open in Interactive Console →